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EMBEDDED WEB SERVER 



PCTAJS97/13817 



COPYRIGHT NOTICE 

The tables attached to the disclosure of this patent contain material that is subject to 
5 copyright protection. The copyright owner has no objection to the facsimile reproduction by 
anyone of the patent document or the patent disclosure, as it appears in the Patent and Trademark 
Office patent file or records, but otherwise reserves all copyright rights whatsoever. 



TABLES 

10 Table A is a functional specification of the Agranat Systems, Inc. Em Web™ product; and 

Table B is a source code listing in the C programming language of header files defining 

data structures representing an archive of content as used by the Em Web™ product. 

The noted tables are provided to show an example of a particular embodiment of the 

invention incorporating features thereof which are described in detail below. 

15 

CROSS-REFERENCE TO RELATED APPLICATION 

Priority is claimed under 35 U.S.C. §11 9(e) to the inventors' Provisional U.S. Patent 
Application Serial No. 08/023,373, entitled EXTENDED LANGUAGE COMPILER AND RUN 
TIME SERVER, filed August 8, 1996, now pending. The inventors' above-identified provisional 
20 U.S. patent application is incorporated herein by reference. 



1. Field of the Invention 

The present invention relates generally to graphical user interfaces (GUIs), i.e. user 
interfaces in which information can be presented in both textual form and graphical form. More 
25 particularly, the invention relates to GUIs used to control, manage, configure, monitor and 

diagnose software and hardware applications, devices and equipment using a World- Wide- Web 
client/server communications model. Yet more particularly, the invention relates to methods and 
apparatus for developing and using such GUIs based on a World-Wide- Web client/server 
communications model. 
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2. Related Art 

Many modern communications, entertainment and other electronic devices require or 
could benefit from improved local or remote control, management, configuration, monitoring 
and diagnosing. It is common for such devices to be controlled by a software application 

5 program specifically written for each device. The design of such a device includes any hardware 
and operating environment software needed to support the application, which is then referred to 
as an embedded application, because it is embedded within the device. Embedded application 
programs are generally written in a high-level programming language such as C, C++, etc., 
referred to herein as a native application programming language. Other languages suitable to 

10 particular uses may also be employed. The application program communicates with users 
through a user interface, generally written in the same high-level language as the application. 

The representation of an application in a native application programming language is 
referred to as the application program source code. A corresponding representation which can be 
executed on a processor is referred to as an executable image. 

15 Before an application written in a high-level language can be executed it must be 

compiled and linked to transform the application source code into an executable image. A 
compiler receives as an input a file containing the application source code and produces as an 
output a file in a format referred to as object code. Finally, one or more object code files are 
linked to form the executable image. Linking resolves references an object module may make 

20 outside of that object module, such as addresses, symbols or functions defined elsewhere. 

Source code may also define arrangements by which data can be stored in memory and 
conveniently referred to symbolically. Such defined arrangements are referred to as data 
structures because they represent the physical arrangement of data within memory, i.e., the 
structure into which the data is organized. 

25 Most commonly, remote control, management, configuration, monitoring and diagnosing 

applications employ unique proprietary user interfaces integrated with the application software 
and embedded into the device. Frequently these user interfaces present and receive information 
in text form only. Moreover, they are not portable, generally being designed to operate on a 
specific platform, i.e., combination of hardware and software. The devices for which control, 

30 management, configuration and diagnosing are desired have only limited run-time resources 
available, such as memory and long-term storage space. Proprietary interfaces are frequently 
designed with such limitations to data presentation, data acquisition and portability because of 
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the development costs incurred in providing such features and in order to keep the size and run- 
time resource requirements of the user interface to a minimum. Since each user interface tends to 
be unique to the particular remote control, management, configuration, monitoring or diagnosing 
function desired, as well as unique to the operating system, application and hardware platform 

5 upon which these operations are performed, significant time and/or other resources may be 
expended in development. Graphics handling and portability have therefore been considered 
luxuries too expensive for most applications. 

However, as the range of products available requiring control, management, 
configuration, monitoring or diagnosing increase, such former luxuries as graphical presentation 

10 and portability of the interface from platform to platform have migrated from the category of 
luxuries to that of necessities. It is well known that information presented graphically is more 
quickly and easily assimilated than the same information presented as text. It is also well known 
that a consistent user interface presented by a variety of platforms is more likely to be understood 
and properly used than unique proprietary user interfaces presented by each individual platform. 

15 Therefore, portable GUIs with low run-time resource requirements are highly desirable. 

With the growing popularity and expansion of the Internet, one extremely popular public 
network for communications between computer systems, and development of the World-Wide- 
Web communication and presentation model, a new paradigm for communication of information 
has emerged. 

20 The World-Wide-Web and similar private architectures such as internal corporate LANs, 

provide a "web" of interconnected document objects. On the World- Wide- Web, these document 
objects are located on various sites on the global Internet. The World-Wide- Web is also 
described in "The World-Wide Web, " by T. Berners-Lee, R. Cailliau, A. Luotonen, H. F. 
Nielsen, and A. Secret, Communications of the ACM . 37 (8), pp. 76-82, August 1994, and in 

25 "World Wide Web: The Information Universe," by Berners-Lee, T., et al., in Electronic 

Networking: Research . Applications and Policy . Vol. 1, No. 2, Meckler, Westport, Conn., Spring 
1992. On the Internet, the World-Wide-Web is a collection of documents (i.e., content), client 
software (i.e., browsers) and server software (i.e., servers) which cooperate to present and receive 
information from users. The World-Wide- Web is also used to connect users through the content 

30 to a variety of databases and services from which information may be obtained. However, except 
as explained below, the World-Wide- Web is based principally on static information contained in 
the content documents available to the browsers through the servers. Such a limitation would 
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make the World- Wide- Web paradigm useless as a GUI which must present dynamic information 
generated by a device or application. 

The World-Wide- Web communications paradigm is based on a conventional client-server 
model. Content is held in documents accessible to servers. Clients can request, through an 
5 interconnect system, documents which are then served to the clients through the interconnect 
system. The client software is responsible for interpreting the contents of the document served, 
if necessary. 

Among the types of document objects in a "web" are documents and scripts. Documents 
in the World-Wide- Web may contain text, images, video, sound or other information sought to 

10 be presented, in undetermined formats known to browsers or extensions used with browsers. The 
presentation obtained or other actions performed when a browser requests a document from a 
server is usually determined by text contained in a document which is written in Hypertext Mark- 
up Language (HTML). HTML is described in HyperText Markup Language Specification - 2.0, 
by T. Berners-Lee and D. Connolly, RFC 1 866, proposed standard, November 1995, and in 

15 "World Wide Web & HTML," by Douglas C. McArthur, in Dr. Dobbs Journal . December 1994, 
pp. 18-20, 22, 24, 26 and 86. HTML documents stored as such are generally static, that is, the 
contents do not change over time except when the document is manually modified. Scripts are 
programs that can generate HTML documents when executed. 

HTML is one of a family of computer languages referred to as mark-up languages. 

20 Mark-up languages are computer languages which describe how to display, print, etc. a text 

document in a device-independent way. The description takes the form of textual tags indicating 
a format to be applied or other action to be taken relative to document text. The tags are usually 
unique character strings having defined meanings in the mark-up language. Tags are described 
in greater detail, below. 

25 HTML is used in the World-Wide- Web because it is designed for writing hypertext 

documents. The formal definition is that HTML documents are Standard Generalized Markup 
Language (SGML) documents that conform to a particular Document Type Definition (DTD). 
An HTML document includes a hierarchical set of markup elements, where most elements have 
a start tag. followed by content, followed by an end tag. The content is a combination of text and 

30 nested markup elements. Tags are enclosed in angle brackets ('<' and ">') and indicate how the 
document is structured and how to display the document, as well as destinations and labels for 
hypertext links. There are tags for markup elements such as titles, headers, text attributes such as 
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bold and italic, lists, paragraph boundaries, links to other documents or other parts of the same 
document, in-line graphic images, and many other features. 
For example, here are several lines of HTML: 

Some words are <B>bold</B>, others are <I>italic</I>. Here we start a new 
5 paragraph.<P>Here's a link to 

the <A HREF="http://www.agranat.com"> Agranat Systems, Inc.</A> home 
page. 

This sample document is a hypertext document because it contains a "link" to another 
10 document, as provided by the "HREF=." The format of this link will be described below. A 
hypertext document may also have a link to other parts of the same document. Linked 
documents may generally be located anywhere on the Internet. When a user is viewing the 
document using a client program called a Web browser (described below), the links are displayed 
as highlighted words or phrases. For example, using a Web browser, the sample document above 
15 would be displayed on the user's screen as follows: 

Some words are bold, others are italic. Here we start a new paragraph. 
Here's a link to Agranat Systems, Inc. home page. 
In the Web browser, the link may be selected, for example by clicking on the highlighted 
area with a mouse. Selecting a link will cause the associated document to be displayed. Thus, 
20 clicking on the highlighted text "Agranat Systems, Inc." would display that home page. 

Although a browser can be used to directly request images, video, sound, etc. from a 
server, more usually an HTML document which controls the presentation of information served 
to the browser by the server is requested. However, except as noted below, the contents of an 
HTML file are static, i.e., the browser can only present a passive snapshot of the contents at the 
25 time the document is served. In order to present dynamic information, i.e., generated by an 
application or device, or obtain from the user data which has been inserted into an HTML- 
generated form, conventional World- Wide- Web servers use a "raw" interface, such as the 
common gateway interface (CGI), explained below. HTML provides no mechanism for 
presenting dynamic information generated by an application or device, except through a raw 
30 interface, such as the CGI. Regarding obtaining data from the user for use by the application or 
device, although standard HTML provides a set of tags which implement a convenient 
mechanism for serving interactive forms to the browser, complete with text fields, check boxes 
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and pull-down menus, the CGI must be used to process submitted forms. Form processing is 
important to remote control, management, configuration, monitoring and diagnosing applications 
because forms processing is a convenient way to configure an application according to user input 
using the World-Wide-Web communications model But, form processing using a CGI is 
5 extremely complex, as will be seen below, requiring an application designer to learn and 
implement an unfamiliar interface. A CGI is therefore not a suitable interface for rapid 
development and prototyping of new GUI capabilities. Moreover, a developer must then master 
a native application source code language (e.g., C, C++, etc.), HTML and the CGI, in order to 
develop a complete application along with its user interface. 
10 Models of the World- Wide- Web communications paradigm for static content and 

dynamic content are shown in Figs. 14 and 15, respectively. As shown in Fig. 14, a browser 
1401 makes a connection 1402 with a server 1403, which serves static content 1405 from a 
storage device 1407 to the browser 1401 . In the case of dynamic content, shown in Fig. 1 5, the 
server 1403 passes control of the connection 1402 with the browser 1401 to an application 1 501, 
15 through the CGI 1503. The application 1501 must maintain the connection 1402 with the 

browser 1401 and must pass control back to the server 1403 when service of the request which 
included dynamic content is complete. Furthermore, during service of a request which includes 
dynamic content, the application 1501 is responsible for functions normally performed by the 
server 1403, including maintaining the connection 1402 with the browser 1401, generating 
20 headers in the server/browser transport protocol, generating all of the static and dynamic content 
elements, and parsing any form data returned by the user. Since use of the CGI 1503 or other 
raw interface forces the application designer to do all of this work, applications 1501 to which 
forms are submitted are necessarily complex. 

In order to provide dynamic content to a browser, the World- Wide- Web has also evolved 
25 to include Java and other client side scripting languages, as well as some server side scripting 
languages. However, these languages are interpreted by an interpreter built into the browser 
1401 or server 1403, slowing down the presentation of information so generated. In the case of 
client side scripting, the script does not have any direct access to the application or to application 
specific information. Therefore, in order to generate or receive application specific information 
30 using client side scripting, the CGI 1503 or other raw interface must still be used. In the case of 
server side scripting, the server 1403 must parse the content as it is served, looking for a script to 
be interpreted. The access which a script has to the application is limited by the definition of the 
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scripting language, rather than by an application software interface designed by the application 
designer. 

A server side script is an executable program, or a set of commands stored in a file, that 
can be run by a server program to produce an HTML document that is then returned to the Web 

5 browser. Typical script actions include running library routines or other applications to get 
information from a file, a database or a device, or initiating a request to get information from 
another machine, or retrieving a document corresponding to a selected hypertext link. A script 
may be run on the Web server when, for example, the end user selects a particular hypertext link 
in the Web browser, or submits an HTML form request. Scripts are usually written in an 

10 interpreted language such as Basic, Practical Extraction and Report Language (Perl) or Tool 
Control Language (Tel) or one of the Unix operating system shell languages, but they also may 
be written in programming languages such as the M C" programming language and then compiled 
into an executable program. Programming in Tel is described in more detail in Tel and the Tk 
Toolkit , by John K. Ousterhout, Addison- Wesley, Reading, MA, USA, 1994. Perl is described 

15 in more detail in Programming Perl , by Larry Wall and Randal L. Schwartz, O'Reilly & 
Associates, Inc., Sebastopol, CA, USA, 1992. 

Each document object in a web has an identifier called a Universal Resource Identifier 
(URI). These identifiers are described in more detail in T. Berners-Lee, " Universal Resource 
Identifiers in World- Wide- Web: A Unifying Syntax for the Expression of Names and Addresses 

20 of Objects on the Network as used in the World-Wide Web ." RFC 1630, CERN, June 1994; and 
T. Berners-Lee, L. Masinter, and M. McCahill, " Uniform Resource Locators (URLV RFC 1738, 
CERN, Xerox PARC, University of Minnesota, December 1994. A URI allows any object on 
the Internet to be referred to by name or address, such as in a link in an HTML document as 
shown above. There are two types of URIs: a Universal Resource Name (URN) and a Uniform 

25 Resource Locator (URL). A URN references an object by name within a given name space. The 
Internet community has not yet fully defined the syntax and usage of URNs. A URL references 
an object by defining an access algorithm using network protocols. An example URL is 
M http://www.agranat.com" A URL has the syntax "scheme: scheme_specific_components" where 
"scheme" identifies the access protocol (such as HTTP, FTP or GOPHER). For a 

30 scheme of HTTP, the URL may be of the form n http://host:port/path?search M 

where 

"host" is the Internet domain name of the machine that supports the protocol; 
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"port" is the transmission control protocol (TCP) port number of the appropriate 
server (if different from the default); 
"path" is a scheme-specific identification of the object; and 
"search" contains optional parameters for querying the content of the object. 
5 URLs are also used by web servers and browsers on private computer systems or networks and 
not just the World-Wide-Web. 

A site, i.e. an organization having a computer connected to a network, that wishes to 
make documents available to network users is called a "Web site" and must run a "Web server" 
program to provide access to the documents. A Web server program is a computer program that 
10 allows a computer on the network to make documents available to the rest of the World-Wide- 
Web or a private web. The documents are often hypertext documents in the HTML language, 
but may be other types of document objects as well, as well as images, audio and video 
information. The information that is managed by the Web server includes hypertext documents 
that are stored on the server or are dynamically generated by scripts on the Web server. Several 
15 Web server software packages exist, such as the Conseil Europeen pour la Recherche Nucleaire 
(CERN, the European Laboratory for Particle Physics) server or the National Center for 
Supercomputing Applications (NCSA) server. Web servers have been implemented for several 
different platforms, including the Sun Sparc 1 1 workstation running the Unix operating system, 
and personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
20 operating system and the Microsoft® Windows™ operating environment. 

Web servers also have a standard interface for running external programs, called the 
Common Gateway Interface (CGI). CGI is described in more detail in How To Set Up And 
Maintain A Web Site , by Lincoln D. Stein, Addison- Wesley, August 1995. A gateway is a 
program that handles incoming information requests and returns the appropriate document or 
25 generates a document dynamically. For example, a gateway might receive queries, look up the 
answer in an SQL database, and translate the response into a page of HTML so that the server 
can send the result to the client. A gateway program may be written in a language such as "C" or 
in a scripting language such as Perl or Tel or one of the Unix operating system shell languages. 
The CGI standard specifies how the script or application receives input and parameters, and 
30 specifies how any output should be formatted and returned to the server. 

A user (typically using a machine other than the machine used by the Web server) that 
wishes to access documents available on the network at a Web site must run a client program 
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called a "Web browser." The browser program allows the user to retrieve and display documents 
from Web servers. Some of the popular Web browser programs are: the Navigator browser from 
NetScape Communications Corp., of Mountain View, California; the Mosaic browser from the 
National Center for Supercomputing Applications (NCSA); the WinWeb browser, from 
5 Microelectronics and Computer Technology Corp. of Austin, Texas; and the Internet Explorer, 
from Microsoft Corporation of Redmond, Washington. Browsers exist for many platforms, 
including personal computers with the Intel Pentium processor running the Microsoft® MS-DOS 
operating system and the Microsoft® Windows™ environment, and Apple Macintosh personal 
computers. 

10 The Web server and the Web browser communicate using the Hypertext Transfer 

Protocol (HTTP) message protocol and the underlying transmission control protocol/internet 
protocol (TCP/IP) data transport protocol of the Internet. HTTP is described in Hypertext 
Transfer Protocol - HTTP/1 .0 . by T. Berners-Lee, R. T. Fielding, H. Frystyk Nielsen, Internet 
Draft Document, October 14, 1995. and is currently in the standardization process. At this 

1 5 writing, the latest version is found in RFC Z068 which is a draft definition of HTTP/1 . 1 . In 
HTTP, the Web browser establishes a connection to a Web server and sends an HTTP request 
message to the server. In response to an HTTP request message, the Web server checks for 
authorization, performs any requested action and returns an HTTP response message containing 
an HTML document resulting from the requested action, or an error message. The returned 

20 HTML document may simply be a file stored on the Web server, or it may be created 

dynamically using a script called in response to the HTTP request message. For instance, to 
retrieve a document, a Web browser sends an HTTP request message to the indicated Web 
server, requesting a document by its URL. The Web server then retrieves the document and 
returns it in an HTTP response message to the Web browser. If the document has hypertext 

25 links, then the user may again select a link to request that a new document be retrieved and 
displayed. As another example, a user may fill in a form requesting a database search, the Web 
browser will send an HTTP request message to the Web server including the name of the 
database to be searched and the search parameters and the URL of the search script. The Web 
server calls a program or script, passing in the search parameters. The program examines the 

30 parameters and attempts to answer the query, perhaps by sending a query to a database interface. 
When the program receives the results of the query, it constructs an HTML document that is 
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returned to the Web server, which then sends it to the Web browser in an HTTP response 
message. 

Request messages in HTTP contain a "method name" indicating the type of action to be 
performed by the server, a URL indicating a target object (either document or script) on the Web 

5 server, and other control information. Response messages contain a status line, server 

information, and possible data content. The Multipurpose Internet Mail Extensions (MIME) are 
a standardized way for describing the content of messages that are passed over a network. HTTP 
request and response messages use MIME header lines to indicate the format of the message. 
MIME is described in more detail in MIME Multipurpose Internet Mail Extensions^: 

1 o Mechanisms for Specifying and Describing the Format of Internet Message Bodies , Internet RFC 
1341, June 1992. 

The request methods defined in the HTTP/1 . 1 protocol include GET, POST, PUT, 
HEAD, DELETE, LINK, and UNLINK. PUT, DELETE, LINK and UNLINK are less 
commonly used. The request methods expected to be defined in the final version of the 

1 5 HTTP/1 . 1 protocol include GET, POST, PUT, HEAD, DELETE, OPTIONS and TRACE. 
DELETE, PUT, OPTIONS and TRACE are expected to be less commonly used. All of the 
methods are described in more detail in the HTTP/1 .0 and HTTP/1. 1 specifications cited above. 

Finally, a device or application using conventional World-Wide-Web technology must 
have access to a server. Conventional servers are large software packages which run on 

20 relatively large, resource-rich computer systems. These systems are resource-rich in terms of 
processing speed and power, long-term storage capacity, short-term storage capacity and 
operating system facilities. Conventional servers take advantage of these resources, for example, 
in how they store content source documents. For high-speed, convenient access to content, it is 
conventionally stored in a directory tree of bulky ASCII text files. Therefore, conventional 

25 World-Wide- Web technology cannot be used to implement a GUI in a relatively small, 
inexpensive, resource-poor device or application. 

The combination of the Web server and Web browser communicating using an HTTP 
protocol over a computer network is referred to herein as the World- Wide- Web communications 
paradigm. 



30 
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SUMMARY OF THE INVENTION 

It is therefore an object of the present invention to provide an improved graphical user 
interface (GUI) for use in connection with remote control, management, configuration, 
monitoring and diagnosing functions embedded in applications, devices and equipment. 

5 According to one aspect of the invention, there is provided a method for providing a 

graphical user interface having dynamic elements. The method begins by defining elements of 
the graphical user interface in at least one text document written in a mark-up language. Next, 
the method defines including at a location in the document a code tag containing a segment of 
application source code. The text document is then served to a client which interprets the mark- 

10 up language; and when the location is encountered, the client is served a sequence of characters 
derived from a result of executing a sequence of instructions represented by the segment of 
application source code. An embodiment of code tags illustrating their use is described in detail, 
later. 

According to another aspect of the invention, there is another method for providing a 

15 graphical user interface having dynamic elements. This method also defines elements of the 
graphical user interface in at least one text document written in a mark-up language. Included in 
the document is a string identified by prototype tags. The text document is served to a 
prototyping client which interprets the mark-up language but does not recognize and does not 
display the prototype tag, but does display the string. An embodiment of prototype tags 

20 illustrating their use is described in detail, later. 

According to yet another aspect of the invention, there is yet another method for 
providing a graphical user interface having dynamic elements. Elements of the graphical user 
interface are defined in at least one text document written in a mark-up language. Included at a 
location in the document is a code tag containing a segment of application source code. Also 

25 included in the document is a string identified by prototype tags. The text document is compiled 
into a content source, which is subsequently decompiled into a replica of the text document. The 
replica of the text document is served to a client which interprets the mark-up language; and 
when the location is encountered in the replica, the client is served a character stream generated 
by executing the segment of application source code. 

30 Yet another aspect of the invention is a software product recorded on a medium. The 

software product includes a mark-up language compiler which can compile a mark-up language 
document into a data structure in a native application programming language, the compiler 
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recognizing one or more code tags which designate included text as a segment of application 
source code to be saved in a file for compilation by a compiler of the native application 
programming language. 

Another aspect of the invention is a method for providing a graphical user interface 

5 having displayed forms for entry of data. The steps of this method include defining elements of 
the graphical user interface in at least one text document written in a mark-up language; naming 
in the document a data item requested of a user and used by an application written in a native 
application programming language; and compiling the text document into a content source 
including a data structure definition in the native application programming language for the 

10 named data item. 

Yet another aspect of the invention may be practiced in a computer-based apparatus for 
developing a graphical user interface for an application, the apparatus including an editor which 
can manipulate a document written in a mark-up language and a viewer which can display a 
document written in the mark-up language. The apparatus further includes a mark-up language 

15 compiler which recognizes a code tag containing a source code fragment in a native application 
source code language, the code tag not otherwise part of the mark-up language, the compiler 
producing as an output a representation in the native application source code language of the 
document, including a copy of the source code fragment. 

In accordance with another aspect of the invention, there is a method for developing and 

20 prototyping graphic user interfaces for an application. The method includes accessing an HTML 
file, encapsulating portions of said HTML and entering source code therein, producing a source 
module from said HTML with encapsulated portions, producing source code for a server, and 
cross compiling and linking said application, said source code module and said server thereby 
producing executable object code. 

25 The invention, according to another aspect thereof, may be a data structure fixed in a 

computer readable medium, the data structure for use in a computer system including a client and 
a server in communication with each other. The data structure includes cross-compiled, stored 
and linked, HTML files with encapsulated portions containing executable code associated with 
said application, server code, and application code, wherein said executable code is run when the 

30 HTML file is served thereby providing real time dynamic data associated with said application. 
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BRIEF DESCRIPTION OF THE DRAWINGS 

In the drawings, in which like reference numerals denote like elements: 
Fig. 1 is a block diagram of that aspect of the invention relating to development systems; 
Fig. 2 is a block diagram of that aspect of the invention relating to an embedded system; 
5 Fig. 3 is an HTML text fragment illustrating the use of an EMWEBSTRING tag; 

Fig. 4 is another HTML text fragment illustrating another use of an EMWEB STRING 

tag; 

Fig. 5 is an HTML text fragment illustrating the use of an EMWEB INCLUDE tag; 
Fig. 6 is another HTML text fragment illustrating another use of an EMWEB INCLUDE 

10 tag; 

Fig. 7 is an HTML text fragment showing a use of the EMWEBITERATE attribute in 
connection with an EMWEB STRING tag; 

Fig. 8 is an HTML text fragment showing a use of the EMWEB_ITERATE attribute in 
connection with an EMWEB JNCLUDE tag; 
15 Fig. 9 is an example of forms processing showing the relationship between the HTML 

source code for the form and the form output produced; 

Fig. 10 is a block diagram of the data structure which defines the header for the data.dat 
archive file; 

Fig. 1 1 is a state diagram of an embedded system illustrating dynamic content processing; 
20 Fig. 12 is a state diagram of an embedded system illustrating forms processing; 

Fig. 13 is a state diagram of an embedded system illustrating suspend/resume processing; 

Fig. 14 is a block diagram illustrating conventional World- Wide- Web communication of 
static content between a server and a client; and 

Fig. 15 is a block diagram illustrating conventional World-Wide- Web communication of 
25 dynamic content between a server and a client. 

DETAILED DESCRIPTION 

The present invention will be better understood upon reading the following detailed 
description in connection with the figures to which it refers. 
30 Embodiments of various aspects of the invention are now described. First, a development 

environment is described in which application development and graphical user interface 
development are closely linked, yet require a low level of complexity compared to conventional 
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development of an application and GUI. Second, an operating environment is described in which 
the application, a server and GUI are tightly coupled, compact and flexible. In the described 
system a GUI having portability, low run-time resource requirements and using any of a wide 
variety of systems available to a user as a universal front end, i.e. the point of contact with the 
5 user is software with which the user is already familiar. 

Development Environment 

Fig. 1 illustrates a development environment according to one aspect of the invention. 
Not all components of the environment are shown, but those shown are identified in the 

10 following discussion. 

Conventionally, an application development environment may include a source code 
editor, a compiler 101, a linker and a run-time environment in which to test and debug the 
application. It is expected that development environments in accordance with the invention 
include those components of a conventional development environment which a developer may 

15 find useful for developing an application. In the case of embedded applications, i.e., applications 
included within a device or larger application, the run-time environment includes the device or 
application in which the application is embedded, or a simulation or emulation thereof. 

The compiler 101 takes source code 103 generated using the source code editor or from 
other sources and produces object code 105, which is later linked to form the executable image. 

20 In addition to the conventional elements noted above, the described embodiment of a 

development environment according to the invention includes an HTML compiler 107 whose 
output 109 is in the source code language of the application under development. In addition, the 
development environment may include an HTML editor, an HTTP-compatible server for 
communicating with client software, i.e., browsers, and an HTTP-compatible browser. 

25 The HTML editor is used to create and edit HTML documents 1 1 1 which define the look 

and feel of a GUI for the application. Numerous tools are now available for performing this task 
while requiring a minimal knowledge or no knowledge of HTML, for example, Microsoft® Front 
Page™. It is preferred that the HTML editor used permit entry of non-standard tags into the 
HTML document. 

30 As will be seen in further detail, below, the server and browser are used to test a 

prototype GUI before it is fully integrated with the application or in the absence of the 
application. The browser should be capable of making a connection with the server using, for 
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example. a conventional connection protocol such as TCP/IP, as shown and described above in 
connection with Fig. 14. Other protocols or direct connections can also be used, as would be 
understood by those skilled in this art. While the browser and the server may be.connected 
through a network such as the Internet, they need not be. For example, the server and client may 

5 run and connect on a single computer system. 

Application development proceeds substantially in a conventional manner as known to 
software developers. The application development should include the design of a software 
interface through which data will be communicated into and out of the application. However, the 
software interface is not a GUI. Rather, the interface merely defines how other software can 

l o communicate with the application. For example, the interface may be a collection of function 
calls and global symbols which other software can use to communicate with the application. The 
application should be written in a high level language such as C, C++, etc. The application can 
be tested by compiling and linking it with prototype code that provides or receives information 
through the software interface, exercising those features of the application. 

15 Meanwhile, a GUI for the application is designed as follows. The look and feel of the 

GUI are developed using the HTML editor, server and browser to create a set of content source 
documents 1 1 1 including at least one HTML document, which together define the look and feel 
of the GUI. This aspect of GUI development is conventional, proceeding as though the 
developer were developing a World-Wide- Web site. 

20 At locations in one or more HTML documents where data obtained from the application 

is to be displayed, the author includes special tags, explained further below, which allow the 
HTML document to obtain from the application the required data, using the application software 
interface. 

The content source documents 1 1 1 are stored conventionally in the form of one or more 
25 directory trees 113. The directory tree 1 1 3 containing the content which defines the GUI is then 
compiled using the HTML compiler 107, to produce an application source code language output 
109 representing the content source documents in the directory tree. The source code elements 
109 produced from the content source documents 1 1 1 in the directory tree 113, source code for 
an HTTP compatible server (not shown) and the application source code 103 are compiled into 
30 object code 105 and linked to form an executable image. The server may be supplied in the form 
of an object code library, ready for linking into the finished executable image. The executable 
image thus formed fully integrates the graphical user interface defined using familiar tools of 
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World- Wide- Web content development with the control and other functions defined using 
conventional application development tools. 

In order to successfully perform the integration described above, the HTML compiler 107 
of the described embodiment of the invention, the EmWeb™/compiler 107, recognizes a number 

5 of special extensions to HTML. The HTML extensions implemented by the EmWeb™/compiler 
107, embodying aspects of the invention are described in detail in Table A, Section 3.2. Several 
of these extensions are described briefly here, to aid in understanding the invention. 

The EMWEB_STRING tag is an extension of HTML used to encapsulate a fragment of 
source code in the HTML document. The source code will be executed by a system in which the 

10 application is embedded when the document is served to a browser (usually running on another 
system) and the location of the EMWEB_STRING tag is reached. The source code returns a 
character string that is inserted as is into the document at the location of the EM WEB STRJNG 
tag. Examples of the use of the EMWEB_STRING tag are shown in Figs. 3 and 4. 

In the example of Fig. 3, the EMWEB STRING tag 301 first defines using "C=" a 

15 boundary character 303 used to define the end 305 of the included source code. Immediately 
following the boundary character definition is a fragment of C code 307 which returns a pointer 
to a string representing one of three fax states. When served by an embedded application, this 
example HTML produces the text "NetFax State:" followed by "Sending", "Receiving" or "Idle", 
depending on the value of the symbol GlobalFaxState. 

20 The example of Fig. 4 shows the use of EMWEBJ5TRING to output typed data whose 

type is defined by an attribute, EMWEBTYPE 401 . The EmWeb™/compiler uses this attribute 
401 to produce a source code output routine which converts the typed data found at the address 
returned 403 into a string for serving at the proper location in the document. 

A similar function is performed by the HTML extension, the EMWEBINCLUDE tag. 

25 Using this tag, standard parts of a GUI such as headers and footers common to multiple pages or 
windows of information need only be stored once. Header and footer files are referred to using 
the EMWEB_INCLUDE tag which inserts them at the location in each HTML content document 
where the tag is placed. In the described embodiment of the invention, the contents of the 
EMWEB JNCLUDE tag must resolve to a relative or absolute path name within the local 

30 directory tree of content. This can be done by specifying a local Universal Resource Locator 
(URL), which is how resources are located in the World- Wide- Web communications paradigm, 
or by including source code which returns a string representing such a local URL. An absolute 
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local URL takes the form "/path/filename", where "/path" is the full path from the root of the 
directory tree to the directory in which the file is located. A relative URL defines the location of 
a file relative to the directory in which the current, i.e., base, document is located and takes the 
form "path/filename". While the described embodiment requires resolution of the 
5 EMWEBINCLUDE tag to a local URL, the invention is not so limited. In alternate 
embodiments, local and external URLs may be permitted or other limitations imposed. 
Examples of the use of the EMWEB JNCLUDE tag are shown in Figs. 5 and 6. 

In the example of Fig. 5, a COMPONENT attribute 501 in an EMWEB JNCLUDE tag 
simply defines a local URL 503. 
10 In the more elaborate example of Fig. 6, a fragment of source code 601 which produces a 

local URL 603 upon a defined condition 605 is used to generate a local URL at run time. 

The results to be returned by an EMWEB_STRING or EMWEB INCLUDE tag can also 
be built up iteratively using repeated calls to the included source code. This is done using the 
EMWEBJTERATE attribute, yet another extension to HTML. Examples of the use of 
15 EMWEBJTERATE are shown in Figs. 7 and 8. 

Fig. 7 shows an example of the EMWEBJTERATE attribute 701 used in connection 
with the EMWEB_STRING tag 703. The fragment of code 705 is executed repeatedly until a 
NULL is returned. Thus, this HTML repeatedly executes the C source code fragment to display 
the tray status of all trays in a system. 
20 Similarly, in Fig. 8, EM WEB JNCLUDE 801 and EMWEBJTERATE 803 are used to 

build a table of features for which content from other URLs 805 are to be displayed. When the 
table is complete, a NULL is returned 807, terminating the iterations. 

Since the extensions to HTML described above allow the encapsulation of source code 
within an HTML document a mechanism with which to provide the encapsulated source code 
25 with required global definitions, header files, external declarations, etc. is also provided in the 
form of an EMWEB JiEAD tag. The EMWEB_HEAD tag specifies a source code component 
to be inserted in the source code output of the EmWeb™/compiler, outside of any defined 
function. Although it is preferred that the EMWEB JIEAD tag appears in the HTML file 
header, it may appear anywhere. The code generated by an EMWEB J-IEAD tag is placed before 
30 any functions or other code defined within the HTML content source documents. 

As indicated above, the GUI may be prototyped using a conventional server and browser 
(see Fig. 14) to preview the HTML documents comprising the GUI. Therefore, it may be useful 
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to provide static content with which to preview the page, at locations where dynamic content will 
appear during use, but which does not appear in the compiled document. For example, it may be 
useful to include a prototyping value for content which is otherwise provided using the 
EMWEBSTRING tag mechanism. Therefore, another extension to HTML recognized by the 

5 EmWeb™/compiler is the EMWEBPROTO begin 309 and end 3 1 1 tags, as shown in Fig. 3. 
The EmWeb™/compiler removes these tags and everything between them when compiling the 
document, but the tags are ignored and the text between them is interpreted normally by a 
conventional browser viewing the HTML document either directly or via a conventional server. 
Conventional browsers recognize the tag due to its special syntax, e.g., being enclosed in "<" and 

l o ">", but are designed to ignore and not display any tag for which the browser does not have a 
definition. All EmWeb™/compiler HTML extensions are thus skipped over by conventional 
browsers. Thus, in the example of Fig. 3, the prototype page displays "NetFax State: Sending". 
Fig. 4 shows a similar use of EMWEB PROTO tags. 

Handling of HTML forms by the EmWeb™/compiler is now described in connection 

15 with Fig. 9. As seen in Fig. 9, an HTML form is defined substantially conventionally. Names 
used in the form are used in constructing symbol names used in the output source code produced 
by the EmWeb™/compiler. Therefore names should be valid symbol names in the source code 
language. 

Each element of a form definition is translated by the EmWeb™/compiler into a part of a 
20 corresponding data structure defined for that form. Forms data is moved into and out of the 
application by changing values of items in the data structure. 

Turning now to the example in Fig. 9, the relationship between the illustrated HTML 
form definition and the corresponding data structure is described. The form is given a unique 
name, using an EMWEB_NAME attribute in a FORM tag. The form name becomes part of the 
25 structure name, for easy reference and uniqueness. The form name will also be used to generate 
function names for functions which are called when the form is served and when the form is 
submitted. 

The structure generated is itself composed of two structures. The first holds values of 
each dynamic element of the form. The second holds a status flag indicating the status of the 
30 contents of a corresponding value. Thus, in the example of Fig. 9, a structure to hold values and 
status for the sysName INPUT and the Logging SELECTion is created. The value of sysName is 
a character string, while Logging is an enumerated type. 
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Two function prototypes are also generated. The actions to be performed by these 
functions must be defined by the developer. The Serve function is called when the form is 
served and can be used to supply default values, for example. The Submit function is called 
when the form is submitted, to update values in the data structure, for example. 

5 Currently, EmWeb™/compiler supports TEXT, PASSWORD, CHECKBOX, RADIO, 

IMAGE, HIDDEN, SUBMIT, RESET, SELECT and OPTION input fields. For detailed 
descriptions, see Table A, Section 3.2.5. In addition, the EmWeb™/compiler supports "typing" 
of TEXT input field data. That is, the EMWEB_TYPE attribute may be used to define a TEXT 
input field to contain various kinds of integers, a dotted IP address (i.e., an address of the form 

10 000.000.000.000), various other address formats, etc. A mapping of EMWEB TYPE values to 
C language types is formed in the table in Table A, Section 3.2.5.3. 

The EmWeb™/compiler has been described in terms of a generic application source code 
language. The current commercial embodiment of the EmWeb™/compiler assumes the 
application source code language to be C or a superset thereof, e.g., C++. However, the 

15 functionality described can be generalized to any application source code language which may be 
preferred for a particular application purpose. However, in order to more fully understand how 
the EmWeb™/compiler and HTML extensions described above cooperate to permit integration 
of an HTML defined GUI with an application defined in an application source code, it will be 
assumed, without loss of generality, that the application source code language is C or a superset 

20 thereof. 

The EmWeb™/compiler produces a set of output files including a data.dat file containing 
the fixed data of a content archive, a codex file containing the generated source code portions of 
an archive including portions defined in EM WEBSTRJNG , EMWEBJNCLUDE and 
EMWEB HEAD tags and other source code generated by the EmWeb™/compiler, as well as 
25 proto.h and stubs.c files containing the definitions of C functions used for forms processing. The 
structure of these files is now described in connection with the data structure illustrated in Fig. 
10. 

The content archive file data.dat has a header structure as illustrated in Fig. 10. The data 
structure is accessed through an archive header 1001 which is a table of offsets or pointers to 
30 other parts of the archive. For example, there is a pointer 1001a to a compression dictionary 
1003 for archives which include compressed documents. There is also a pointer 1001b to a 
linked list of document headers 1005, 1007 and 1009. Each document header 1005, 1007 and 
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1009 is a table of offsets or pointers to various components of the document. For example, the 
document header includes a pointer 1005a to the URL 101 1 to which the document corresponds. 
There is also a pointer 1005b to a field 1013 giving the Multipurpose Internet Mail Extension 
(MIME) type of the document. There are pointers 1005c and 1005d respectively to header nodes 
5 1015 and document nodes 1017, explained further below. Finally, there is a pointer 1005e to a 
block of static compressed or uncompressed data 1019 representing the static portions of the 
document. 

The static data does not include any Em Web™ tags, i.e., the extensions to HTML 
discussed above and defined in detail in Table A. Rather, information concerning any Em Web™ 

10 tags used in the document appears in the document nodes structure. 

Each Em Web™ tag employed in a document is represented in that document's document 
nodes structure as follows. The location of the Em Web™ tag within an uncompressed data 
block or an uncompressed copy of a compressed data block is represented by an offset 1017a 
relative to the uncompressed data. The type of tag is indicated by a type flag 1017b. A node 

15 may include a flag which indicates any attributes associated with the tag represented. For 

example, a node for a tag of type EMWEB_STRING may include a flag indicating the attribute 
EMWEB ITERATE. Finally, nodes include an index 1017c. In nodes defining form elements, 
the index holds a form number and element number uniquely identifying the element and form 
within the document. In nodes defining EMWEB_STRING tags, the index is a reference to the 

20 instance of source code which should be executed at that point. As such, the index may be 
evaluated in an expression of a "switch" statement in C, where each controlled statement of the 
"switch" statement is one source code fragment from one EMWEBSTRING instance. 
Alternatively, the index may be a pointer or index into a table of source code fragments from 
EMWEB STRING tags, which have been encapsulated as private functions. 

25 The data structure defined above provides a convenient way of transferring control as a 

document containing dynamic content is served. When a document is requested, the list of 
document nodes is obtained, to determine at what points control must be transferred to code 
segments which had been defined in the HTML source document. The document is then served 
using the data block defining the static elements of the document, until each document node is 

30 encountered. When each document node is encountered, control is transferred to the appropriate 
code segment. After the code segment completes execution, the static content which follows is 
served until the offset of the next document node is encountered. 
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Header nodes permit the storage of document meta information, not otherwise handled, 
such as content language, e.g., English, German, etc., cookie control, cache control or an e-tag 
giving a unique version number for a document, for example a 30-bit CRC value computed for 
the document. By avoiding having to put this information in the header of each document, 
5 significant space can be saved in the archive because not all documents require this information. 
Therefore, header nodes need only be stored for documents using this information. 

The data structure which represents the archive of content used by the 
EmWeb™/compiler embodiment of the invention is defined by the C source code contained in 
Table B. 

10 

Run-time Environment 

Aspects of the invention related to the run-time environment and server are embodied in 
the EmWeb™/server as described in detail in Table A, Section 4. 

To a conventional browser implementing HTTP, the EmWeb™/server behaves 
15 conventionally. However, as shown in Fig. 2, the EmWeb™/server is fully integrated with the 
application and therefore has access to information about the application and device in which it is 
embedded. 

Operation of the EmWeb™/server with respect to presentation of dynamic content is now 
described in connection with Fig. 11. 

20 Before the operations shown in Fig. 1 1 commence, one or more archives are loaded by 

the server. When each archive is loaded, the server generates a hash table using the archive 
header data structure to make documents easy to locate using URLs. 

First, the browser requests a document at a specified URL, using HTTP 1101. The 
EmWeb™/server acknowledges the request, in the conventional manner 1 103. The 

25 EmWeb™/server then uses the hash table of the archive header to locate the document requested 
and begin serving static data from the document 1 105. When a document node is encountered, 
for example denoting the presence of an EMWEBJSTRING tag, then the server passes control to 
the code fragment 1 107a of the application which had been included in the EMWEB STRING 
tag 1 107. When the code fragment completes execution and returns some dynamic data 1 109, 

30 the EmWeb™/server then serves that dynamic data to the browser 1111. The EmWeb™/server 
then resumes serving any static data remaining in the document 1113. This process continues 
until the entire document, including all dynamic elements has been served. 
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Run-time serving and submission of forms is now described in connection with Fig. 12. 
A brief inspection of Fig. 12 will show that form service and submission proceeds along similar 
lines to those for serving dynamic content. 

The browser first requests a URL using HTTP 1201 . When, during service of the 

5 contents of the URL requested, a form is encountered, service of the form and any HTML- 
defined default values commences normally. The EmWeb™/server then makes a call to the 
application code 1203 to run a function 1203a which may substitute alternate default values 1205 
with which to fill in the form. The document served then is made to include the default values 
defined by the static HTML as modified by the application software 1207. Later, when the user 

10 submits the form, the browser performs a POST to the URL using HTTP 1209. The form data is 
returned to the application by a call 1211 made by the EmWeb™/server to a function 1211 which 
inserts the data returned in the form into the data structure defined therefor within the application 
code. The response 1213 is then served back to the browser 1215. 

Finally, it should be noted that there may be times when a request for dynamic content 

1 5 may require extended processing, unacceptably holding up or slowing down other operations 
performed by the application. In order to avoid such problems, the EmWeb™/server implements 
a suspend/resume protocol, as follows. The suspend/resume protocol exists within a context of a 
scheduler maintained and operated by the server. The scheduler includes a task list of scheduled 
server tasks to be performed. 

20 Fig. 1 3 illustrates a situation where a browser requests a document containing an 

EMWEBSTRING tag whose processing is expected to interfere with other application 
operations. The initial HTTP request 1301 for the document is acknowledged 1303, 
conventionally. When the EMWEB STRING tag is encountered, control transfers 1305a to the 
appropriate source code fragment 1 305b in the application. The application then calls the 

25 suspend function 1 307 of the EmWeb™/server and returns a dummy value 1 309 to the function 
call generated at the EMWEB_STRING tag location. Calling the suspend function 1307 causes 
the scheduler to remove the EMWEB_STRING processing task from the task list. When the 
application has finally prepared the dynamic content required in the original function call, the 
application calls a resume function 1311 of the EmWeb™/server. Calling the resume function 

30 1311 requeues the EM WEB-STRING processing task on the task list, as the current task. The 
EmWeb™/server responds by calling 1305c the function 1305d defined at the 
EMWEBJ5TRING tag again, this time immediately receiving a response from the application in 
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which the requested dynamic content 1313 is returned. The dynamic content is then served to 
the browser 1315. 

The suspend/resume feature is particularly useful in distributed processing environments. 
If an embedded application is running on one processor of a distributed environment, but 

5 dynamic content can be requested which is obtained only from another processor or device in the 
distributed environment, then the use of suspend/resume can avoid lockups or degraded 
processing due to the need to obtain the dynamic content through a communication path of the 
distributed environment. Consider, for example, a distributed system including a control or 
management processor, and several communication devices. An embedded application running 

10 on the management processor can be queried for configuration data of any of the communication 
devices. Without suspend/resume, obtaining that data would tie up the communication path used 
by the management processor for control of the various communication devices, degrading 
performance. 

The described embodiment of the invention illustrates several advantages thereof. For 

15 example, an embedded application can now have a GUI which is independent of either the 
application platform of that used to view the GUI. For example, the GUI can be operated 
through a Microsoft® Windows™ CE machine, Windows™ 3.x machine, Apple Macintosh, 
WebTV box, etc. running conventional browser software. Also, development of a GUI for an 
embedded application is greatly simplified. The look and feel is designed using conventional 

20 HTML design techniques, including straight-forward prototyping of the look and feel using a 
conventional client server system, using simple HTML extensions. Integration with the 
embedded application does not require the developer to learn or develop any special interface, 
but rather uses some HTML extensions to incorporate application source code directly into the 
HTML content. Yet another advantage in that the entire embedded application along with an 

25 HTTP-compatible server and the content to be served is reduced to a minimum of application 
source code, data structures for static data and data structures for dynamic data. 

The present invention has now been described in connection with specific embodiments 
thereof. However, numerous modifications which are contemplated as falling within the scope 
of the present invention should now be apparent to those skilled in the art. For example, the 

30 invention is not limited to content whose source is HTML. Any mark up language could be used 
in the context of this invention. Alternatively, the content source could be raw text, which is 
particularly suitable for situations where the output of the user interface is also processed by one 
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or more automatic software text filters. Therefore, it is intended that the scope of the present 
invention be limited only by the properly construed scope of the claims appended hereto. 
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1. Introduction 

The explosive growth of the World-Wide-Web in recent years has created a new standard 
for the Graphical User Interface (GUI) of networked applications: the Web browser. 
Netscape®, Mosaic, and other commercial and public-domain Web browsers are 
ubiquitous and inexpensive. 

1.1. Web-based Network Management 

Network management is a natural application for the World-Wide-Web. Before the Web, 
network management required end-users to purchase expensive custom-built GUI 
applications that used the. SNMP protocol to manage network-based devices. With 
World-Wide-Web technology, many of these applications can be replaced by 
economical Web browsers. 

World-Wide-Web standards make it possible to migrate the "iook-and-feel" intelligence 
of the device configuration GUI away from third-party and custom-built network 
management applications and into the managed device itself. This migration gives 
vendors control over the configuration "look-and-feel" of their products among both low- 
cost Web browsers and the high-end third-party network management applications of 
the future. 

Web-based network management can greatly accelerate the time-to-market for 
products traditionally managed by SNMP. With SNMP-based management, new 
product features require significant engineering resources to design and implement 
proprietary MIBs and develop customized GUI applications to manage the new features. 
On the other hand, Web-based management GUI applications can be rapidly prototyped 
and implemented using simple HTML forms. 

SNMP will continue to play an important role in high-end network management 
applications by utilizing standard MIBs to monitor the overall topology and health of 
devices throughout the enterprise network. However, the new World-Wide- Web 
standards offer an exciting alternative to SNMP for the configuration and management 
of individual devices. 



1.2. Web-based Systems, Devices, and Software 

Embedded Web server technology can enable remote configuration, monitoring, and 
diagnostic capabilities for a wide range of applications. Imagine sending and receiving 
faxes, checking your voice-mail, and knowing the availability of your favorite candy bar 
in the vending machine down the hall by using your Web browser? Your office manager 
could configure the phone switch and voice-mail system, check the toner and paper 
levels in the photocopying machine, and monitor the security alarm system from their 
desktop. Your automobile mechanic could connect to your car's computer to perform 
engine diagnostics, and if -they were stumped, the manufacturer could examine the 
results from around the world over the Internet. 
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1.3. Goals 

EmWeb™ by Agranat Systems is a family of Embedded World-Wide-Web protocol 
software products engineered for the demanding real-time requirements of embedded 
systems. 

Goals of the EmWeb product architecture include: 

- Ease of use 

. Support rapid prototyping and implementation of new World Wide Web interfaces 
including device monitoring, configuration, and network management. 

. Easily portable to a wide-variety of real-time embedded operating environments 
with limited operating system capabilities, memory, and CPU resources. 

. Easily upgradable with new releases as Worid-Wide-Web standards continue to 
evolve rapidly. 

- High performance 

. Efficient implementation for real-time processing environments. 
. Small foot-print to minimize FLASH and RAM resources required. 

- Security 

. Support for authentication and security standards as they continue to evolve. 
. Configuration of method-independent access controls. 
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1.4. Assumptions 

This functional specification assumes that the reader is familiar with the C programming 
language, the World-Wide-Web, and standards such as HTML (Hyper-Text Markup 
Language). Knowledge of HTTP (Hyper-Text Transport Protocol) and CGI (Common 
Gateway Interface) is also helpful to understand some of the more advanced features, 
but isn't required for most applications. 
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2. Overview 

One draw-back to traditional World-Wide-Web servers is the CGI interface. Although 
HTML provides a convenient mechanism for sending interactive forms to a Web browser 
complete with text fields, checkboxes, and pull-down menus, the CGI interface used by 
server applications to process submitted forms is difficult to master. Form processing is 
essential for network management applications because it is the best way to implement a 
device configuration screen using World Wide Web protocols. However, CGI is not an 
appropriate interface for the rapid implementation and prototyping of new network 
management capabilities (ErnWeb's number one goal). Another draw-back to traditional 
World-Wide-Web servers is the static nature of the content of files served to the Web 
browser. These files are typically resident on disk and are not expected to change 
frequently. On the other hand, the data of interest to network management applications is 
constantly changing (e.g. the number of packets received on a particular Ethernet port). 

The EmWeb architecture works around the draw-backs of traditional World-Wide-Web 
servers by extending the standard HTML specification with new proprietary tags 
developed by Agranat Systems. These tags make it possible to provide a more intuitive 
HTML form processing interface for embedded systems, and give the application run-time 
control over the document content for the presentation of dynamic data. Note that these 
tags are not actually sent to the Web browser. Instead, they are stripped out and 
interpreted by the EmWeb/Compiler. 

The EmWeb product consists of two components: The EmWeb/Compiler and the 
EmWeb/Server. 

The EmWeb/Compiler is a tool provided by Agranat Systems that runs on an engineering 
development work-station under Unix, Windows/NT (x86), and Windows/95. The tool 
compiles one or more directories of files containing HTML, Java, text, graphics, etc., into 
one or more EmWeb archives. Each archive consists of an object code component and a 
fixed data component. These components are usually linked into the target's run-time 
image at compile time. However, the EmWeb architecture permits the dynamic loading 
and unloading of the fixed data components at run-time. Furthermore, if the target's 
operating system supports the dynamic loading and linking of object code modules, then 
entire archives may be loaded and unloaded at run-time. 

The EmWeb/Server is a portable run-time library implemented in ANSI C which is 
compiled and linked with the target platform's application software. The EmWeb/Server 
implements the HTTP protocols to handle requests from Web browsers and interfaces 
with the archives created by the EmWeb/Compiler. The EmWeb/Server implements an 
application interface (API) to the target software environments memory management, 
buffer management, and TCP/IP protocol stack. 
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3. EmWeb/Compiier 

The EmWeb/Compiier processes directories of HTML and other Web documents to 
generate ANSI C code. The generated C code is then compiled using a C cross-compiler 
to generate object code for the target system. HTML forms are translated by the EmWeb/ 
Compiler into a simple C function call interface customized to the application. The 
software developer is responsible for implementing the application-specific C code using 
these simple interfaces. The EmWeb/Compiier can generate function prototype 
definitions (a C include header file) to ensure correctness, and optionally generates stub 
functions to accelerate development. 

The figure below illustrates the operation of the EmWeb/Compiier. 
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3.1. EmWeb Context 

The EmWeb/Server maintains a handle of type Evscontext at run-time that corresponds 
to a specific HTTP request from a Web browser client. This handle is made available to 
the application code responsible for providing the run-time content of HTML documents 
and forms. 

The EmWeb/Server contains a library of functions available to the application for 
extracting information attached to this handle. For example, the application may want to 
determine the type of browser making a request, and change the look-and-feel of the 
requested document to take advantage of features available to particular browsers, in 
this example, the application could extract the browser type as follows: 

bytes = ewsContextUserAgent (ewsContext, 

user_agent, sizeof (*user_agent) ) ; 

For more information about available context information functions, refer to 4.1.5. 
Request Context Access, page 48. 

3.2. HTML Extensions 

The content to be provided by the EmWeb server is prepared as you would content for 
any normal Web server. The developer constructs a directory tree (or trees) of 
documents, which may include HTML documents, Java, text, graphics, and sound 
samples. The EmWeb compiler is then run over the content directory tree to build an 
internal database that is compiled and linked with the EmWeb/Server and the system 
code. 

EmWeb defines proprietary HTML tags and attributes for access to system data and 
dynamic system control of the served documents. These tags are never served to 
browsers by the EmWeb/Server, and because (with one exception) they have no body 
part (they do not use a start and end tag, but only a stand-alone tag with attributes), they 
are ignored by browsers that see them when browsing the content tree either locally or 
via a non-EmWeb server. This facilitates testing and prototyping of content. 

3.2.1. EMWEB_STRlNG 

The <emweb_string> tag is used to provide applications with run-time control of an 
HTML document's content by encapsulating a fragment of C code in the document 
itself. This C code is executed as the document is being served to a Web browser and 
returns a null-terminated character string that is inserted as-is into the document in 
place of the <emweb_string> tag. 

To include content in a document (which may include any standard HTML): 

<EMWEB_STRING C='...; return (char *) somestring; ' > 

or 

<EMWEB_STRING EMWEB_ITERATE C=« ' . . . ; return (char ») somestring; ' > 
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The EmWeb/Compiler extracts the C language code fragment from the emweb_string 
tags in an HTML document and constructs a C module from them. Each fragment must 
end with a return statement that returns a pointer to a null-terminated string (or a null 
value which inserts no content). When the location of the emweb_string tag in the 
content is reached, the EmWeb/Server executes the code fragment and inserts the 
returned string into the document. If the optional emweb_iterate attribute is specified, 
the code fragment is called repeatedly until it returns a null pointer value. The number 
of iterations already processed (beginning with zero) is available to the code fragment 
by calling: 

evsContextltexations (ewsContext) ; 

Note that the local variable 

EwsContext ewsContext; 

is made available to the emweb^string C code fragment by the ErnWeb/Compiler. 

The returned string must not be an automatic (stack) variable. The value is copied for 
transmission by EmWeb/Server immediately after returning. Thus, a single static 
string buffer may be shared by multiple code fragments. If pre-emptive multi-threading 
is to be used, the application may maintain a per-request buffer as part of its network 
handle. Alternatively, emwebjcterate may be used to support dynamic allocation of the 
string buffer as follows. On the first iteration (#0), memory may be allocated, filled with 
data, and returned to the EmWeb/Server for transmission. On the second iteration 
(#1), memory may be released and a null pointer returned to terminate the iteration. 

The EmWeb/Compiler treats the embedded code opaquely; from the compiler's point 
of view, the code is simply a string of text that gets assembled into a generated code 
file. (See 3.6. Compiler Output, page 25). 

As such, the Em Web/Compiler needs to know the beginning and end of the embedded 
C code fragment. The character following the c= attribute in the emweb_string tag 
identifies the "bounds" of the embedded C code. This character must" be either a 
single quote (') or double quote ("). When the EmWeb/Compiler identifies this 
"boundary character", it then treats all following characters as part of the embedded C 
code fragment, until it finds the next terminating "boundary character". 

The obvious problem here is that the embedded C code can contain a single or double 
quote as part of the C code. For example: 

return "Example of EmWeb's dynamic content\n"; 

In order to keep the EmWeb compiler from mistakenly confusing a single or double 
quote that belongs to the C code fragment as the ending "boundary character, the 
programmer must escape (using 'V) any character intended for the C code that would 
be confused with the terminating boundary character. Thus, the above code fragment 
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could be embedded in an emweb_string tag in either of the following ways: 

<EMWEB_STRING O' return "Example of EmWeb\'s dynamic content\n° ; ' > 
<EMWEB_STRING C°"retum V'Example of EmWeb's dynamic content\n\" ; " > 

The <emweb_string> tag may optionally be typed using the emwebjtype attribute as 
follows: 

<emweb_string emwebjtype -decimal jjint C=' . 

return (uint32 *) &some_integer ; ' > 

If emwebjtype is specified, then the C code fragment must return a pointer to data with 
the corresponding type. EmWeb/Server will convert the value into a character string 
automatically. A table of supported types can be found in section 3.2.5.3. HTML Form 
TEXT Input Fields, page 13 

3.2.2. EMWEB JNCLUDE 

The EmWeb/Server provides server-side inclusion of any part of its content tree using 
the ekweb_include tag; it is used in the same way as the emweb_string tag: 

<EMWEB_INCLUDE COMPONENT 3 'Local -URL' > 

or 

<EMWEB_INCLUD£ C*'...; return (char *) localURL;'> 

or 

<EMWEB_INCLUDE EMWEB_ITERATE C='...; return (char *) localURL;'> 

If the component tag is specified, the specified local element is resolved and inserted 
into the current document. This allows standard parts such as headers and footers to 
be stored only once. 

As in emweb_string, the fragment specified by the c= attribute must end with a return 
statement that returns a pointer to a null-terminated string (or null). For 
emwebjenclude, however, this string is treated as a relative or absolute path name 
within the local content tree. The path name is resolved to an entire document, which 
is then inserted in the current document for return to the browser. If the optional 
emweb_iterate attribute is specified, the code fragment is called repeatedly until it 
returns a null pointer value. The number of iterations already processed (beginning 
with zero) is available to the code fragment using the same access routine used for 
emweb_string. This tag is useful for building a response from components that may 
be part of the original document tree, or created dynamically. 

Note that the local variable 

EwsContext evsContext; 

is made available to the emweb_include C code fragment by the EmWeb/Compiler. 
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The same quoting rules as emweb_string apply to emweb_include. 

3.2.3. EMWEB_HEAD 

Because the <emweb_string> and <emweb_include> tags allow the application to 
encapsulate fragments of C code within an HTML document, a mechanism is needed 
to provide the code fragments with the necessary global definitions, header files, 
external declarations, etc. needed for compilation. The <emweb_head> tag is provided 
for this purpose. 

<EMWEB_HEAD C='#include f ile-name.h' > 

The emweb_head tag, if present, should appear in the head portion of the HTML 
document (this is not enforced, but the code fragments from all emweb^head fragments 
are placed at the beginning of the generated module, so doing so is less confusing);* rt 
specifies a source fragment to be inserted in the generated module outside any C 
function. This fragment may declare variables, constants, or (as shown in the example 
above) C preprocessor directives - it could even define entire subroutines. This 
fragment is never executed directly by the EmWeb Server, so it does not insert any 
content into the document at the location of the tag. 

Note that all emweb_head code fragments from all HTML files in an archive are 
combined into the generated archive object code component source file. Therefore, it 
is recommended that common ainciude directives appear only in one document in the 
archive (typically, the index.html document at the archive's root directory). 

The same quoting rules as emweb_string apply to emkeb_head. 

3.2.4. EMWEB_PROTO 

When designing an HTML document, it may occasionally be useful to provide content 
with which to preview the page, but which does not appear in the compiled document. 
This is accomplished with the emweb_proto begin and end tag; the Em Web/Compiler 
removes these tags and everything between them when producing the document 
database, but the text between them is interpreted normally by a browser viewing the 
HTML document directly or via a conventional server. For example: 

<H4> 
System: 

</H4> 

When compiled, the system name displayed in the first level header will be the value 
in the string variable mib2sysNaine, but viewed with a browser when previewing it looks 
like: 

System: system-name 

Note that the EmWeb/Compiler ignores HTML comments (e.g. n < • - - ... -->"). If 
emweb string and emweb_include tags are present within HTML comments, they will 
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<EMWEB PROTO> sy s tem • name </EMWEB_PROTO> 
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be expanded by EmWeb/Server. If it is. desirable to "comment out" an emweb_string 
or emweb_include tag, emwebjproto tags should be used instead. 

3.2.5. Forms 

Form processing takes place as two operations: serving the form to the browser, 
possibly with current or default values set in some form input elements, and 
processing the values from the submitted form. Each of these operations is assisted 
by an application-provided routine associated with the form. Prototypes for these two 
application routines are produced for each form by the EmWeb/Compiler using 
information provided by EmWeb attributes on the FORM and its input elements. 

Restriction: While HTML allows it, EmWeb does not support 
nested form tags (you may not have a form within a form). 

The elements for each form are combined in a generated C data structure by the 
EmWeb Compiler; this structure is passed by the EmWeb Server to each of the two 
form processing routines, and includes information on the status of each element. 

3.2.5.1. Form Element Names 

The emweb_name attribute is used to specify the names to be used by the EmWeb/ 
Compiler when generating function and structure names. 

On the form tag, the emweb_name attribute specifies a base name to be used to 
generate the function names and the form data structure name. (This implies that the 
value of the emweb_name attribute must be a valid C identifier). Note that if emweb_name 
is not present in a <form> tag, then the form is simply ignored by the EmWeb/ 
Compiler and is passed as-is to the browser. 

Consider the following example. Suppose there exists an HTML document 
"example.html" that contains: 

<F0RM METHOD c POST EMWEB_NAME= foo ACTION=Jbar > 

The action attribute is optional; if action is not specified, then there may be only one 
form in the document If action is specified, it is served to the browser as 
n ACTioN°exampie. htmi/bar n , (This allows Em Web/Server to differentiate between 
multiple forms in a document. It also allows the submission of forms to be protected 
by different access controls than the serving of fonms. See 3.4. ^ACCESS Files, 
page 22). 

The EmWeb/Compiler generates the following function and structure prototypes: 

typedef struct EwaFoim_foo_s 
{ 

struct 
t 

} value; 
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struct 



} status; 
} EwaForm_f oo; ... 

void evaFormServe_foo (EvsContext context, EwaFornn_foo *formp) ; 
char * evaFormSubmit_f oo (EwsContext context, EwaFoim_f oo *foimp); 

The ellipsis (...) above are replaced by declarations of the structure members to hold 
the data for each form element. The standard HTML name attribute is used in each 
input tag of the form to specify the structure member names within the form data 
structure. 

Restriction: While HTML allows arbitrary string values for name 
attributes, EmWeb requires that name attributes are valid C 
identifiers since they are used as field names in the form's C 
structure definition. 

The application-provided ewaFormserve_jfoo function is invoked by EmWeb/Server 
when the HTML document containing the form is requested by a Web browser. This 
provides the application with an opportunity to modify the default values displayed 
by the browser at run-time. 

The application-provided ewaFormsubmit_f oo function is invoked by Em Web/Server 
when the corresponding HTML form is submitted. This provides the application with 
an opportunity to process the submitted form data and generate an appropriate 
response. 

3.2.5.2. Form Data Structure 

The generated form data structure passes information for the form between the 
system and the EmWeb/Server. It has two sections: Value 1 and 'status', each 
containing one or more members for each form element. The 'status' section 
member is a flag that indicates the status of the contents of the Value' member. The 
Value 1 member contains the data for the form element in an internal representation 
which may be specified by the form author using the emwebjtype attribute. For 
example: 

<INPUT TYPE-TEXT SIZE-15 MAXSIZE-15 VALUE=127 . 0 . 0 . 1 
NAME B i£Addr EMWEBJTYPE =DOTTED_IP> 

The example above produces the following structure members: 

typedef struct EwaForm_foo_s 
{ 

struct 
{ 



uint32 



ifAddr; 
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uincf ifAd<±r_size; 
uintf ifAddrjnaxlength; 

} value; 
struct 
{ 

uint8 if Addr; 

} status; 
} EwaForm_foo; 

The value. ifAddx member contains the host-order 32-bit IP address, The 
evaFoimseive_f oo function sets this structure member with the value to be displayed 
on the form and sets status. if Addr to ew_form_initialized. (Note that if 
status . if Addr is not changed by the application, then the form is displayed with the 
value specified by the value tag, "127 .0.0. 1"), When the Web browser end-user has 
entered a valid IP address and submits the form, the EmWeb/Server sets 
value, if Addr to the value provided by the browser and sets status, if Addr to 

EW_FORMJRETURNED before invoking ewaFormSubmi t_f oo. 

The value. if Addr_size member is generated because the size attribute was 
specified and defaults to 15. This gives ewaFormserve_f 00 an opportunity to override 
the field size value before serving the form. (This field is not used by 

ewaFormSubmi t_foo). 

The value. if Addrjnax length member is generated because the maxsize attribute 
was specified and defaults to 15. This gives ewaFormserve_f 00 an opportunity to 
override the maximum field size value at run-time. (This field is not used by 

ewaFormSubmi t_f oo). 

The status, if Addr member is used to indicate the status of the form element 
member and consists of a bit field defined as follows (from src/inciude/evs_def .h): 

/* 

* For ewaFormServe * 
*/ 

#define EW_FORM_INI TIALI ZED 0x01 /• set if field initialized */ 
#define EW_FORM_DYNAMIC 0x02 /* set if field ewaAlloc'ed */ 

/• 

* For ewaFormSubmi t * 
•/ 

#define EW_FORM_RETORNED 0x10 /* set if value returned */ 
#define EW_FORM_PARSE_ERROR 0x20 /* set if value invalid */ 
#define EW_FORM_FILE_ERROR 0x20 /* or i/o error */ 

For the ewaFormserve_* call (when the form is being sent to the browser), the 
structure is passed with the status for each element set to either zero, or 
ew_form_initialized if a default value was specified by the HTML vaule tag. When 
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control is returned to the EmWeb/Server, the server checks each status and uses 
the new value for each field for which the ew_form_initialized is set. Initialized 
values override any value, checked, or selected values specified in the source 
HTML document. The ewj^rmdynamic flag is only valid for type fields containing 
pointers to data (including text, password, hidden, textarea, submit, and 
emweb_type=hexstring) and indicates that the memory referenced by the pointer 
was allocated by evaAiioc and must be freed by ErnWeb/Server using evanee after 
the form is served. 

When the form is submitted by the browser, the server attempts to convert each 
value returned by the browser to the appropriate type. The server sets the status 
member to indicate the status of the data member of the structure, and then calls the 
evaFormsubmit_* routine associated with the form. The ew_form_retuhned flag is set 
if a valid value was returned for the field in the submission. The 
ew_formjparsejsrror flag is set if a value was returned, but was not parsed correctly 
for the specified emwebjtype. 

Note: When a form is submitted, the contents of a value field is 
undefined unless the ew_form_returned flag is set in the 
corresponding status byte. 

The application processes the submitted values and returns a string containing the 
URL to use as the redirection response to the Web browser, or null for an empty 
("204 No Content") response. Alternatively, the following function may be invoked to 
return a local relative URL from the archive as a response. 

EwsStatus ewsContextSendReply ( EwsContext context, char * url ); 



3.2.5.3. HTML Form TEXT Input Fields 

A text field can be used to represent a wide variety of value types. For example, a 
text field may be used to configure an IP address in which case the natural C- 
language representation is a host-order 32-bit integer. By default, a text field is 
simply a null-terminated character string. However, the emwebjtype attribute may be 
used to indicate any of a number of supported EmWeb types. Refer to the table 
below for details. 

HTML text fields may specify a field size and/or a maximum length. If so, additional 
_size and _maxiength structure members are added to the form structure to give the 
app!ication~run-time control over these values. The format and resulting form 
structure fields of a text input field is given below. 

<INPUT TYPE=TEXT NAME=na;ne {MAXLENGTH B #max) {SIZE=flsize} {VALUE«value} 
{EMWEB JTPE«evt,ype} > 

EwType name; /* defaults to value */ 

uintf namejnaxlength; /* defaults to #max */ 

uintf name size; /* defaults to tfsize */ 
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The following table lists all emwebjtype values currently supported. 



EMWEB_TYPE 


C-Type 


Description 


(not specified) 


char * 


null-terminated string 


DECIMAL_INT 


int32 


32-bit signed integer 


DECIMALJJINT 


uint32 


32-bit unsigned integer 


HEX_INT 


uint32 


32-bit unsigned hex integer 


DOTTED^ IP 


uint32 


32-bit host-order IP address translated using 
the conventional dotted-quad ASCII notation. 


IEEEJ1AC 


char [6] 


IEEE MAC address (any of ':' or or " is 
accepted between bytes on input, displayed 
with ':'). I/G bit is least significant (Ethernet) 


FDDI_MAC 


char [6] 


FDD1 MAC address (any of ':' or or " is 
accepted between bytes on input, displayed 
with '-'). I/G bit is most significant (FDDI, 
Token Ring) 


STD_MAC 


chai [6] 


A MAC address - if : or is used between 
bytes on input, it is interpreted as IEEE (I/G 
bit is least significant); if '-' is used on input, it 
is interpreted as FDDI (I/G bit is most signifi- 

IdlUy. L/lo|Jlayt?U do IluL WilU • . 


H£X_STRING 


struct { 
uint32 length; 
uint8 *datap; 
}; 


A hex string. Any of ':' or '-' or " or white- 
space is accepted between bytes. Displayed 
with". 


DECN£T_IV_ADDRESS 


uintl6 


area.node 


OBJECT_ID 


struct { 
uint32 length; 
uint32 *datap; 
}; 


A variable length array of unsigned decimal 
integers displayed with periods between ele- 
ments. 



Note that support for additional EmWeb types may be added in future releases. 



3.2.5A.HTML Form PASSWORD Input Fields 

A password field is represented by a null-terminated character string. HTML 
password fields may specify a field size and/or a maximum length. If so, additional 
_size and _maxiength structure members are added to the form structure to give the 
application run-time control over these values. The format and resulting form 
structure fields of a password input field is given below. 
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<INPUT TYPE-PASSWORD NAME°.na/ne {SIZE°8size) {MAXLENGTH°# max length) 
{VALUE°value} > 

char *name; /* defaults to value, ox NULL*/ 

uintf jjafl>e_size; /* defaults to tisize */ 

uintf aamejnaxlength; /* defaults to tfmaxlength */ 

3.2.5.5. HTML Form CHECKBOX Input Fields 

Checkbox fields are represented as booleans. The optional value field is passed 
unchanged to the browser and is not used by EmWeb. 

<INPUT TYPE ° CHECKBOX NAME°i3cune {VALUE°value} {CHECKED) > 
boolean name; /* defaults to TRUE if CHECKED , else FALSE */ 

Note: If the ew_form_returned bit in the status byte is set on 
submission, then the checkbox was checked and the value is 

TRUE. 

3.2.5.6. HTML Form RADIO Input Fields 

Radio buttons are represented by a C enumerated type generated by the EmWeb/ 
Compiler for each unique value assigned to a radio button in the archive. (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration), 

<INPUT TYPE=RADIO NAME°73a;ne VALUE°vaiueJ {CHECKED) > 
<INPUT TYPE 0 RADIO NAME 0 name VALUE°vaiue2 {CHECKED) > 

typedef enum EwaFormEnum_e^ar chive e 
{ 

, vaiuel 
, valued 

) Eva Fox mEnum_e w^ar chive; 

EwaFoxmEnum_ew_arcj3ive name;/* defaults to checked value */ 

Restriction: While HTML allows arbitrary string values for valve 
attributes, EmWeb requires that value attributes for radio 
buttons are valid C identifiers since they are used as 
enumerated type identifiers. 

Note that EmWeb/Compiler generates a single enumeration for each archive. The 
ev_archive suffix may be overridden at the command line (See 3.5. Compiler 
Options, page 23). 

The following function is provided as a convenience for translating from the 
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enumerated type's integer value to its name as specified by the value attribute: 

const char *ewsFormEnumToString ( Ewscontext context, int value ) ; 

3.2.5.7. HTML Form IMAGE Input Fields. 

Images are "read only" from the point of view of the application as they return the x 
and y image coordinates selected by the end-user from the Web browser. Therefore, 
the generated structure value members are only useful in the ewaFormSubmit_* 
application function. Structure members are generated representing the x and y 
coordinates as follows. 

<INPUT TYPE = IMAGE NAME=na/ne SRC»src {ALIGN^align} > 

typedef struct EwaForm_foo_s 
{ 

struct 
{ 

uint32 name_x; 
uint32 name _y; 

) value; 
struct 
{ 

uint8 name; 

} status; 
} EwaForm_foo; 

3.2.5.8. HTML Form HIDDEN Input Fields 

Hidden fields are identical to text fields except that they are not displayed (and thus 
not modified) by the browser. They are typically used by applications to pass context 
information to the browse. This context information is returned to the application 
during submission. 

<INPUT TYPE s HIDDEN NAME* name {VALUE«value} {EMWEB_TYPE=ewtype} > 
EwType name; /* defaults to value if present */ 

3.2.5.9. HTML Form SUBMIT Input Fields 

Submit buttons with name attributes are represented by a null-terminated character 
string. Submit buttons without name attributes are not included in the form structure. 

<INPUT TYPE a SUBMIT { NAME = name} {VALUE=value} > 

char *name; /* defaults to value if present */ 
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3.2.5.10. HTML Form RESET Input Fields 

No structure member is generated for a reset button. 

3.2.5.11. HTML Form SELECT/OPTION Fields 

Select boxes may be used to select a single item from a list (the default), or multiple 
items from a list (if the attribute multiple is present). For single item selection, values 
are represented by a C enumerated type generated by the Em Web/Compiler. (The 
enumerated types defined by radio buttons and single select options are combined 
into a single archive-wide enumeration). 

< SELECT NAME=na/ne {SIZE=#size} > 

<OPTION VALUE* vaiuel {SELECTED} > 
<OPTION VALUE°vaiue2 {SELECTED) > 

</SELECT> 

typedef enum Eva FoimEnum_e w_ai chive e 
• { " 

, valuel 
,value2 

) E wa For mEnum_e w_az chive ; 

EvaFoimEnum_ev_ax chive name;/* defaults to selected value */ 

For multiple item selection, a status and value form structure field is generated for 
each option as follows: 

<SELECT NAME -name {SIZE=#size} MULTIPLE > 

<OPTION VALUE«valuei {SELECTED} > descriptive text 
<OPTION VALUE=vaiue2 {SELECTED} > descriptive text 

</SELECT> 

boolean valuel; /* defaults to TRUE if SELECTED */ 

boolean value2; /* defaults to TRUE if SELECTED */ 

uintf name_size; /+ defaults to flsize */ 

HTML select fields may specify the size of the selection box. If so, an additional 
_size structure member is added to the form structure to give the application run- 
time control over this value. 

Restriction: While HTML allows arbitrary string values for value 
attributes, EmWeb requires that value attributes for select 
options are valid C identifiers since they are used as 
enumerated type or structure field identifiers. 

3.2.5.12. TEXTAREA 

The textarea value is a null-terminated string of characters. Additional value fields 
are placed in the form structure for the number of rows and columns in the textarea. 
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These fields are initialized by Em Web/Server to the defaults specified in the source 
HTML document, but may be overridden at run-time by the application's 

ewaFormServe * function. 



<TEXTAREA .COLS=#cols ROWS=#rows NAME = name > 
</TEXTAREA> 



♦name; /* null- terminated string */ 

name_cols; /* default to tfcols */ 

Mi73e_rows; /* default to tfrows */ 

Note that the *name points to the text present in the textarea input field. 
3.2.5.13. File Upload 

RFC1867 file upload defines a new form input type as follows: 

< INPUT TYPE D FILE NAME c name {VALUE=value} {SIZE=Srows { , #cols} } > 

Note: Use of file input types requires that the form uses 
multipart/form-data as an encapsulation type. This must be 
specified in the <form> tag as follows: 

<FORM METHOD=POST ENCTYPE c multipar t/f orm-da ta ... > 

This causes the browser to prompt the user for a local (relative to the browser) 
filename (by default, value is used if specified). On submission, the file is uploaded 
to the server along with other form field values. 

EmWeb/Compiler parses file type input fields into the following fields in the form 
value substructure: 



char 

uintf 

uintf 



char *na/ne; /* serve only; default filename */ 

EwaFileHandle name Jiandle; /* submit only: received file */ 

u f nCf name_size; /* serve only: #rows (no #cols) */ 

u f ntf name_rows; /* serve only: #rows (w/ftcols) */ 

uintf na/ne_cols; /* serve only: #cols */ 

In addition, the following fields in the form status substructure are generated as well: 

u f nCB nam ^i /* status for filename */ 

uint8 name Jiandle; /* status for received file */ 

For more detailed information on the file upload interface, please refer to 4.1 .8. Local 
Filesystem Interfaces, page 54. 

3.2.6. Graphic Maps 

The HTML ismap attribute on an img tag specifies that the file is an image map. Such 
an img tag must always be enclosed within an anchor that specifies a hyper-link URL 
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The ismap attribute causes a dick within the image to be sent as a request to the URL 
in the enclosing anchor, qualified by the x & y coordinates of the click within the image. 

Em Web provides support for image maps through a map element in the HTML source 
tree which specifies rectangular regions and URLs to be associated with them. 

The interface designer creates an image map file, a text file which defines the URLs 
to be provided for each region of the image. The syntax of the entries is: 

iect-line | default -line 

rect- line ::«■ rect uxl point point 

point : '.<> x,y 

default-line ::= default uil 

The rect token specifies a. URL to be served in response to the specified top-left and 
bottom-right coordinates. The optional default specifier provides the URL for any 
coordinate not specified by some rect (only one default is allowed). Order of the rect 
lines is significant - if the regions overlap the first match takes precedence. 

if no match is found, and no default is specified, the server returns "no content" to the 
browser, effectively a no-operation. Otherwise, the matching URL is returned to the 
browser as a redirection. The URL may be relative to the map file in the archive or 
absolute. 

The map files are compiled by EmWeb/Compiler so that they do not need to be parsed 
at run-time by the EmWeb/Server. The following illustrates the syntax of a typical map 



rect examplel.html 15, 18 169,37 
rect example2.html 157,46 385,65 
rect example3.html 365,71 460,87 
default /home. html 

If the above file was "sample. map", and corresponded to the image "/pictures/ 
sample . gif ", the following HTML would be used to implement the map: 

<A HREF=»sample.map«> <IMG SRC-'/pictures/sample.gif •• ISMAP> </A> 

By convention, map files use the suffix '.map', but this can be changed See 3 3 
mime.types Configuration File, page 20, and 3.4. _ACCESS Files, page 22. 

3.2.7. Cache Control 

The HTTP/1.0 protocol has some simple provisions for communicating cachabiiity 
information to caches and proxies between the server and the browser. HTTP/1.1 
provides even greater cache control features. 
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By default, EmWeb/Server classifies compiled-in documents as being either static or 
dynamic. A document is considered dynamic if it contains one or more emweb_strings, 
ekweb_includes, or EmWeb-enhanced HTML forms. Otherwise, the document is 
static. 

When serving a static document, EmWeb/Server sends a Last-Modified HTTP header 
indicating the time and date that the corresponding archive was created by the 
Em Web/Compiler. No other cache control headers are generated in HTTP/1.0. With 
HTTP/1.1, a Cache-Control header is generated indicating either "public" if the 
document is not protected by an authentication realm, or "private" if it is. 

When serving a dynamic document, EmWeb/Server sends a Last-Modified and 
Expires HTTP header indicating the current time and date, as well as "Pragma: no- 
cache" for HTTP/1 .0 and "Cache-Control: no-cache B for HTTP/1 .1 . 

It may be desirable to override the above default behavior for certain applications. 
Specifically, an application may desire static treatment of a dynamic document. For 
example, If emweb_include tags are used to insert common headers and footers, 
EmWeb/Server would treat the document as dynamic even though the content may 
actually be static. The following EmWeb tag may be used anywhere in an HTML 
document to mark it as static for cache control purposes: 

<EMWEB_STATIC> 

3.2.8. EmWeb CGI 

The mechanisms described above are designed to meet most needs of the system 
designer without having to deal with the complexities of direct access to the HTTP 
input and output mechanisms. If such access is desired, the EmWeb raw CGI interface 
provides access similar to that available in a CGI program environment on any HTTP 
server. See 4.1 .6. Raw CGI, page 51 . 



3.3. mime.types Configuration File 

The mime, types configuration file is read by EmWeb/Compiler before processing source 
directories of HTML and other Web documents. If "-m" is specified on the EmWeb/ 
Compiler command line, then the specified file is used. Otherwise, EmWeb/Compiler 
searches for a mime . types file by first looking at the $emweb_mime environment variable, 
and then looking at semwebjk>me/$emmeb_mime. If the $emweb_mime environment variable 
is not specified, it defaults to "mime.types". If the $emweb_home environment variable is 

not Specified, it defaults tO n /usi/local/share/emweb n . 

The mime.types file contains default parameters for files derived from the file name 
suffix. For example: 

# 

# EmWeb/Compiler mime.types file example 

# Anything after a is a comment. 

# A line whose first character is white space is a continuation line 
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# Each specifier must end in ';' 
# 



.map 



.html . 

.txt 

.gif 



type °text /html paxse-emweb_html compress ; 

type* text/plain parse a emweb_text compress ; 

type°image/gif parse»binary ; 

imagemap; 

index»index.htinl; 



The suffix may be any tail match; it is not restricted to values starting with \\ The 
mime, types file contains specifiers for the default access rights and parameters of files 
ending with a particular suffix. Each specifier is the file name suffix, followed by one or 
more of the following attributes, followed by a semicolon: 

type-mime-type 

Specifies the MIME encapsulation media type represented by the file. Media 
type values are registered with the Internet Assigned Number Authority 
(I AN A). Use of non-registered media types is discouraged. (Note that the 
mime -type must be quoted if it contains a V line-terminator character). The 
default type depends on the parser selected (see below). 

parse=emweb_html / emwebjext / text /binary 

Specifies how the Em Web/Compiler is to parse the file. 

EMWEBjiTML indicates that the file contains HTML and the Em Web/Compiler 
handles <emweb_string> , <emwe3_include> , <emweb_proto> , 
<emweb_head> , and EmWeb HTML forms. The default type for the 
emweb_html parser is "text/html". 

emweb jtext indicates that the file contains text which may contain 

<EMWEB_STRING> , <EMWEB_INCLUDE> , <EMWEB_PROTO> and <EMWEB_HEAD> 

directives. However, such a file may not contain EmWeb HTML forms. The 
default type for the emwebjtext parser is n text/plain". 

text indicates thafthe file contains text which should not be parsed (e!g. 
PostScript). The default type for the text parser is n text/piain n . 

binary indicates that the file contains rav/ binary data. The default type for 

the BINARY parser is "application/octet-stiearo". 

The default parser is binary if not otherwise specified. 



compress 



Specifies that the content should be compressed. The EmWeb 
compression algorithm creates an archive-wide dictionary of common 
strings which are referenced by the individual documents. Compression 
ratios for text files of 50% can be achieved if there is sufficient redundancy 
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throughout the archive. However, compression ratios will vary widely among 
applications. The default is no compression. 

nocornpress 

Specifies that the content should not be compressed. (This is typically used 
in an ^access file to override a specification in mime, types). The default is 
no compression. 

imagemap 

Specifies that the content is an imagemap that defines the coordinates for 
an image. This implies "hidden", and inherits realm membership from the 
current directory. 

ignore 

Specifies that the entry should be skipped (i.e. not included in the archive). 
This is typically used to exclude source control directories, backup files from 
editors, etc. 

The current directory is specified using 7 as the suffix name. Directories may contain 
the attribute: 

i nd ex= index-file-name 

The element (in the directory) to be returned in response to an access 
request to that directory (a URL whose last component is the directory 
name). 



3.4. ^ACCESS Files 

Access to individual files and directories is controlled by a configuration file in each 
source archive directory named ^access'. The ^access files contain specifiers for the 
access rights of elements in the corresponding directory (and optionally for the directory 
itself using the 7 specifier). Specifiers in the _access file override specifiers in the 
mime. types file. Each specifier is the file name (not a suffix) followed by any of the 
attributes defined above for mime. types. The following additional attributes are 
permitted in ^access files. 

rea\m= realm-name 

requires that any request to access the file or directory must be 
authenticated in the named realm. If an empty realm is given (i.e. realm-" ••), 
then the file may be accessed without any authentication. See 4.1.4. 
Authentication and Security, page 39. 

hidden 

Specifies that the file is included for use in constructing dynamic content and 
may not be seen or accessed directly by a Web browser. (Note that the 
hidden and realm attributes are mutually exclusive). 
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link=ar/ 

Specifies that this element is linked to a different URL When accessing this 
file, the browser shall be redirected to the specified relative or absolute URL 
The link attribute may not appear with any other attributes. 

If realm is specified for a directory, it applies as a default for all files and subdirectories 
within the current directory. Specifications for individual files in an _access file override 
defaults specified for the directory. 

If hidden is specified for a directory, it applies as a default for all files and 
subdirectories within the current directory. Individual files and subdirectories may be 
overridden by specifying a realm. 

Note that a default 7 specification for index may be included in the mime . types file arid 
overridden in individual _access files. 

In addition to the elements in the directory, the _access file may specify the base name 
for CGI elements (which do not need actual files in the HTML tree). These are 
specified with the access attribute cgi below and may also have a realm attribute. 

cg\-symbol 

The element is a CGI application. The symbol value is used by the Em Web/ 
Compiler to generate application-specific prototypes for the raw-CGI 
interface. See 4.1.6. Raw CGI, page 51. 

Finally, form action URLs used when a browser submits an EmWeb HTML form to the 
EmWeb/Server may be protected by a specific realm which may be different from the 
realm of the document containing the form. In this way a form may be used to display 
data to a less restricted realm, while permitting changes only from users in a more 
restricted realm. For example, if the HTML file "example .html" contained an EmWeb 
HTML form tag <form method«post emweb_name * f o o AcrioN=bar>, the following 
specifier may appear in the _access file corresponding to the directory containing 

"example. html". . 

example . html/bar realm«xeai/i)- < name 



Access control is only computed by the EmWeb/Server on the initial URL; if the 
element to be returned in response to the URL includes an emwe3_include tag, the 
EmWeb/Server does not perform an access check on those individual elements. 

3.5. Compiler Options 

The EmWeb/Compiler program "ewe" takes the following command-line arguments 
followed by a list of one orrnore directories and/or files with which to build an EmWeb 
archive. 
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( -n I -name ) <archive-symboI-base-name> 

The base symbol name produced by EmWeb/Compiler corresponding to 
the object part (and, if -c is. also specified, the data part) of the archive. By 
default, this parameter is 'ev_archive n . Thus, the following symbol is 
generated by the EmWeb/Compiler in encode . c: 

EwsAx chive ew_ar chive; 

And if the -c option is specified, the following symbol is generated in 

ew_data.c. ■ 

uintB ew_archive_data[] ; 

( -m | -mime ) <mime.types filename> 

The path name to the mime, types configuration file. By default, Em Web/ 
Compiler looks in $emweb_mime {mime, types) followed by $emweb_home/ 

SEMWEBJ4IME (/usz/local/shaie/emweb/mime . types). 

( -u | -url ) <archive-url-base-path> 

The base URL path of the generated archive. By default, this is '/'. 

(-ri-raw)l(-c|.-c). 

The output, format of the generated archive data component (raw by. 
default). If - -iaw is specified, the data component of the archive is written to 
the file ev_data.dat as a raw binary file. If -c is specified, the data 
component of the archive is written to the file e*_data.c as a C file that, 
when , compiled, produces an array of data reference by the symbol 
ew_axchive_data. Both flags may be specified on the command line to 
cause the generation of both raw and C output files. 

( -o | -output ) 

The prefix for generated files data.dat, data.c, code.c, stubs. c, and 
pro to , h (" . /ewj by default). 

( -s I -stubs ) 

Generate ev_stubs.c file containing stubbed-out versions of form and CGI 
functions normally provided by the application to facilitate rapid prototyping 
and development 

( -C | -no-compress ) 

Disable compression of the archive. (Overrides compress attribute in 
mime. types and_Acc£ss files). 

(-11 -little) 

The byte-order of the generated archive data component. By default, a big- 
endian archive is generated. If --little is specified, then a little-endian 
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archive is generated. 

( -P | -no-preprocessor ) 

Disable generation of #iine pre-processor directives in generated 
ew_code . c file; normally, these directives are included so that the C compiler 
and debuggers can find the original C in the source HTML documents. This 
option should only be used if your C compiler does not understand the 
'aline 1 directive. 

( -q | -quiet ) I ( -v | -verbose ) | ( -d | -debug ) 

The logging level. The -quiet options suppresses all but error messages. 
The • - verbose is specified, more logging output is produced. The • - debug 
is specified, still more logging output is produced. The default (non of these 
options specified) includes errors and some warning messages. 

( -v | -version ) 

Displays the EmWeb/Compiler J s version. 



Two dashes in a row indicate the end of options. All remaining parameters 
are file and/or directory names. This is optional, as any parameter that does 
not begin with a is assumed to be a file and/or directory name. 

3.6. Compiler Output 

The EmWeb/Compiler produces the following output files: 
ew_data.dat 

A raw binary file containing the data component of the archive. 
ew_data.c 

If the --c option is specified at the command line, this file is generated. It 
contains C code that, when compiled, defines an array of octets 
representing the data component of the archive and referenced by the 

global Symbol uints ev_archive_data [) . 
ew_code.c 

A C file that, when compiled, defines the object component of the archive 
referenced by the global symbol (EwsAichive) ew_aichive. 

ew_proto.h 

This C header file is generated if the archive contains EmWeb HTML forms 
or CGI documents. The header file defines function prototypes and data 
structures for an application-specific interface between EmWeb/Server and 
application-provided functions responsible for serving and submitting forms 
and/or raw CGI processing. 
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ew_stubs.c 

If the - - stubs option is specified at the command line, this file is generated. 
It contains stubbed-out versions of form and CGI functions normally 
provided by the application to facilitate rapid prototyping and development. 
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4. EmWeb/Server 

The EmWeb/Server is written in portable ANSI C and is easily integrated into a wide 
variety of embedded application environments. EmWeb/Server implements the HTTP 
protocol and responds to requests from networked Web browsers with documents stored 
in run-time archives created by the EmWeb/Compiler. 

The following figure illustrates a typical EmWeb/Server device management application. 
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Figure 2: EmWeb/Server 



SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 

EmWeb™ Functional Specification 



•56- 
Confidential 



PCT/US97/13817 

EmWeb/Server 



4.1. Application Interfaces 

The Em Web/Server application interfaces are divided into six functional areas including 
system interfaces, network interfaces, document and archive maintenance, 
authorization and security, request context access, and raw CGI. 

Many application interfaces are optional and can be configured out of the EmWeb/ 
Server at compile time. This offers the system integrator flexibility in balancing the trade- 
offs between functionality, memory requirements, and system performance. 

Most application interfaces are provided by the Em Web/Server and are called by the 
application. However, some application interfaces must be provided by the application 
and are called by the EmWeb/Server. Function names beginning with "ews" and data 
types beginning with "Ews n are defined by the server for use by the application. Function 
names beginning with B ewa B and data types beginning with "Ewa" must be defined by 
the application for use by EmWeb/Server. 

Status codes returned by the EmWeb/Server to the application are of type EwsStatus 
and are defined as follows (from src/inciude/ev S _def .h): 

/* 

* Status codes returned to the application by EmWeb/Server 
•/ 

typedef enum EwsStatus_e 
{ 

ews_status_ok, 
ews_status_bad_magic , 
ews_status_bad_version , 
ews_status_already_exists , 
ews_status_no_resources , 
ews_status_in_use , 
ews~status~not_regi stered , 
ews~status_not_cloned , 
ews_status_not_found , 
ews_s tatus_auth_fai led , 
ews_status jbad_state , 
ews_statusjbad_realm , 
ews_status_fatal_error , 
ews_status_abort!d 

) EwsStatus; 

Status codes returned by the application to the EmWeb/Server are of type EwaStatus 
and are defined as follows (from src/inciude/ev S _def .h) : 



* Status codes returned to EmWeb/Server by the application 
*/ 

typedef enum EwaStatus_e 
{ 

EWA_STATUS_OK, 
EWA_STATUS_OK_YIELD , 
EWA~STATUS ERROR 
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} EvaStatus; 

4.1.1. System Interfaces 

The system functional interfaces are further divided into four functional areas including 
initialization, scheduling, memory management, and time-of-day services. 

4.1.1.1. Initialization and Shutdown 

Before any other application interface function may be used, the EmWeb/Server 
must be initialized. This is accomplished by invoking the following function: 

EwsStatus ewslnit ( void ); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (ews_status_no_resources is returned if EmWeb/Server was unable to 
allocate memory for internal hash tables, etc.). 

A graceful shutdown of the EmWeb/Server can be accomplished by invoking the 
function below. This causes EmWeb/Server to terminate all outstanding HTTP 
requests and release all dynamically allocated resources. 

EwsStatus ewsshutdovn ( void ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). 

4.1.1.2. Scheduling 

The EmWeb/Server is capable of serving multiple HTTP requests simultaneously. It 
may be configured at compile-time to use either its own internal real-time scheduler 
or to make use of an external scheduler provided by the application's operating 
system. 

If an external scheduler is to be used, HTTP requests may be multi-threaded if each 
TCP connection is handled by its own operating system thread. Otherwise, requests 
will be single-threaded. The evsRuno, ewssuspendo and evsResumeO functions 
described below for EmWeb/Server's internal scheduler would not be used. Instead, 
all application <emweb_string> and <emweb_include> code fragments and 
evaFoimserve_/ and evaFoxmsubmit_* functions are invoked from the 

evsNetHTTPReceiveO function. 

If the internal scheduler is to be used, HTTP requests are served from the following 
function: 

EwsStatus ewsRun ( void ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). All 
application <emweb_string> and <emweb_include> code fragments and 
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ewaFormSexve_* and evaFormSubmi t_* functions are invoked from ewsRunO . 

The ewsRunO function processes any outstanding HTTP requests until either all 
requests have been served, or the application requests that Em Web/Server yield the 
CPU as follows. Each time EmWeb/Server sends a buffer of HTTP response data to 
the network via the application-provided ewaNecHrrpsend function, the application 
may return the status ewa_status_ok_yield to request that the EmWeb/Server 
relinquish control of the CPU. This will cause the EmWeb/Server to return from the 
ewsRun o function immediately. (Note that if the last buffer of the HTTP response was 
transmitted, the EmWeb/Server will close the connection and release any 
corresponding resources before returning control to the application). 

In addition, the internal scheduler gives the application a means to temporarily 
suspend a specific HTTP request each time it invokes application-specific code from 
<emweb_string>, <emweb_include > , and HTML form serve and submit functions. The 
application may instruct EmWeb/Server to suspend an HTTP request from the 
application-specific code provided in <emweb_string> and <emweb_include> Ccode 
fragments, and EwaFormserve_* and EvaFormsubmit_* functions by invoking the 
following function before returning to the EmWeb/Server. 

EwsScatus ewsSuspend ( EwsContext context ); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned (ews_status_bad_state). When the application returns to EmWeb/Server 
after invoking ewssuspend, the EmWeb/Server may continue to process other 
outstanding requests from ewsRunO before returning control to the application. Note 
that the value returned by the application after calling ewssuspend is ignored. The 
application's <emweb_string> or <emweb_include> C code fragment or 
ewaFormserve_* or ewaFoimsubmi t_* function is re-invoked when the request is 
resumed. This functionality makes it possible to implement proxy servers (i.e. a local 
HTTP request might cause the application to send an IPC message to another 
process and suspend EmWeb/Server processing of this request until an IPC 
response is received). The application can resume a previously suspended request 
by invoking the following function. 

EwsStatus evsResume ( EwsContext context, EwaStatus status ); 

Status can be either ewa_status_ok or ewa_status_ok_yield. If the status is 
ewa_status_ok, then the resumed request may be scheduled right away (for 
example, this could cause ewsRun to be invoked internally). Otherwise, the 
suspended request is scheduled to run, but is not actually run until control is 
transferred back to EmWeb/Server. This gives the application control over which 
CPU thread processes HTTP requests (i.e. a suspended request may be resumed 
by an interrupt handler for execution later in a polling loop that calls ewsRun). This 
function returns ews_status_ok on success. Otherwise, an error code is returned 
(ews_status_bad_state) . 
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The following function may be invoked from within the application's <emweb_string> 

oi <EMWEB_INCLUDE> C COde fragment Or evaFormServe_* Or evaFormSubmit_* 

function to determine if this is the initial invocation of the application code, or if the 
code is being resumed. 

boolean evsContextlsResuming ( EvsContext context ) ; 

This function returns true if the application code is being re-invoked after 
ewsResume. Otherwise, this function returns false. 

4.1.1.3. Memory Management 

The EmWeb/Server requires the application to provide simple memory management 
for the allocation and release of temporary data-structures used throughout the 
processing of HTTP requests and maintaining the run-time document archive and 
authentication databases. These functions are equivalent to the POSIXmaiioc and 
free calls as follows: 

void * ewaAlloc ( uintf bytes ) ; 
void evaFree ( void * pointer ) ; 

The ewaAlloc function (or macro) returns a pointer to available memory of at least 
the specified number of bytes long, -or null if no memory is available. The evaFiee 
function (or macro) returns a block of available memory previously allocated by 

ewaAlloc. 

Note: If the EmWeb/Server is unable to allocate memory 
during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's ewaNetHTTPEndo function is 
invoked. Alternatively, the application may implement 
ewaAlloc o so as to block until resources are available using 
external operating system facilities. 

4.1.1.4. Time-of-Day Management 

Some of the optional HTTP/1.0 functionality requires a "time-of-day" for Date:, 
Expires:, and Last -modified: headers. Many embedded systems do not have a 
reliable time-of-day capability, so these features are configurable options in EmWeb/ 
Server. To take advantage of these features, the application must provide the 
following function (or macro): 

const char * ewaDate ( void ) ; 

This function should return the current time (GMT) in one of the following two 
formats: 

RFC1123: (Preferred) 

Fri, 08 Jun 1996 08:57:28 GMT 
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RFC850: 

Friday, 08-Jun-96 08:57:28 GMT 

4.1 .2. Network interfaces 

The EmWeb/Server relies upon a pre-existing TCP/IP protocol stack available in the 
target software environment. The interface between the application's TCP/IP protocol 
stack and the EmWeb/Server is event driven. This approach makes it possible to port 
EmWeb/Server to a wide variety of software environments. 

4.1.2.1. Network Buffer Management 

The EmWeb/Server design assumes that the application maintains data buffers for 
the reception and transmission of TCP data. 

Buffers can be uniquely identified by an application-defined buffer descriptor. No 
assumptions are made about the actual structure of the buffer descriptors or their 
relationship to the data. For example, a buffer descriptor could be an index into a 
table, a pointer to a structure (either contiguous or separate from the data 
represented), etc. The application is responsible for defining the appropriate type for 
zwaNetBuf f ex and a value for ewa_net_buffer_null. 

Buffers can be chained together. Given a buffer descriptor, EmWeb/Server must be 
able to get or set the "next buffer in the chain" field. This is done by the 

ewaNetBufferNextSet and ewaNetBuf ferNextGet functions (or macros). Note that 

the buffer chain is terminated when the next buffer value is ewa_netjbuffer_null. 

EwaNetBuf f er ewaNetBuf ferNextGet ( EwaNetBuf f ex buffer ) ; 

void ewaNetBuf fexNextSet ( EwaNetBuf fer buff ex, EwaNetBuf fer next ); 

Given a buffer descriptor, EmWeb/Server can determine the start of data in the 
buffer. Additionally, EmWeb/Server may change the start of data in the buffer 
(EmWeb/Server only moves the pointer to the data upward (increments)). This is 
done by the ewaNetBufferDataGet and ewaNetBufferDataset functions (or macros). 

uint8 * ewaNetBufferDataGet ( EwaNetBuf f ex buffer ) ; 

void ewaNetBufferDataset ( EwaNetBuf fer buffer, uint8 *datap ); 

Given a buffer descriptor, EmWeb/Server can determine the size of contiguous data 
in the buffer. Additionally, EmWeb/Server may change the size of the buffer 
(EmWeb/Server only changes the size of the buffer downward (decrements)). This 

is done by the ewaNetBufferLengthGet and ewaNetBuf ferLengthSet functions (or 

macros). 

uintf ewaNetBufferLengthGet ( EwaNetBuf fer buffer); 

void ewaNetBuf ferLengthSet ( EwaNetBuf fer buffer, uintf length ); 
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EmWeb/Server may allocate a single buffer by invoking the ewaNetBuf f exAiioc 
function (or macro). The application may return a buffer of any size to EmWeb/ 
Server. The size of the buffer must be initialized to the number of bytes available in 
the buffer for EmWeb/Server. If no buffers are available, this function returns 
ewa_net_J3uffer_null. Additionally, EmWeb/Server may release a chain of one' or 
more buffers by invoking the ewaNetBuf femee function (or macro). 

EwaNetBuf f ex ewaNetBuf feiAlloc ( void ) ; 
void ewaNetBuffeiFiee (EwaNetBuf f ex buffer); 

Note: If the EmWeb/Server is unable to allocate a network 
buffer during the processing of a particular HTTP request, the 
request is aborted, all resources related to the request are 
released, and the application's ewaNetHTTPEndo function is 
invoked. Alternatively, the application may implement 
ewaNetBuf feiAiioco so as to block until resources are 
available using external operating system facilities. 



4.1.2.2. TCP/IP Interfaces 

The application is responsible for listening to the HTTP TCP port (80) for connection 
requests. When an HTTP TCP connection request is received, the application 
accepts the TCP connection on behalf of EmWeb/Server and invokes the following 
function: 

EwsContext ewsNetHTTPStaxt ( EwaNetHandle handle ); 

This function returns a new context handle which the application is expected to use 
when referencing this HTTP request for future operations. The value 
ews_context_null is returned on failure (e.g. no resources available to handle the 
new request). The handle parameter is application-defined and is returned to the 
application unchanged by the EmWeb/Server in other network interface calls as 
illustrated below. The handle is also made available to <emweb_string> and 
<emweb_include> C code fragments and ewaFoxmserve_* and ewaFoimsubmit_* 
application functions by invoking the following function: 

EwaNetHandle ewsContextNetHandle ( EwsContext context ) ; 

At anytime, the application can abort an uncompleted HTTP request by invoking the 
following function: 

Ewsstatus ewsNetHTTPAboit ( EwsContext context ); 

This function is typically invoked by the application to notify EmWeb/Server that the 
corresponding TCP/IP connection has been disconnected. The function returns 
ews_status_ok on success. Otherwise, an error codecs returned. (There are 
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currently no conditions that cause an error to be returned). 

As data buffer(s) are received from the network on a TCP connection corresponding 
to an HTTP request, the application passes these buffers to the EmWeb/Server by 
invoking the following function. 

EwsStatus ewsNetHTTPReceive {EwsContext context, EwaNetBuffer buffer); 

This function returns ews_status_ok on success. Otherwise, an error code is 
returned. (There are currently no conditions that cause an error to be returned). The 
buffer parameter describes a chain of one or more buffers containing raw TCP data. 
The structure of the buffers is determined by the application, and the application 
provides EmWeb/Server with functions to manipulate these buffers as defined 
previously. Note that EmWeb/Server takes responsibility for releasing received 
buffers when they are no longer needed, and may hold on to buffers containing 
certain HTTP request headers for the duration of the request. 

When EmWeb/Server has assembled one or more buffers for transmission, it 
invokes the following function (or macro) which must be provided by the application: 

EwaStatus evaNetHTTPSend ( EwaNecHandle handle, EwaNetBuffer buffer ); 

This function transmits (and then releases) a chain of one or more network buffers 
and returns ewa_status_ok or ewa_status_ok_yield on success, or 
ewa_status_error on failure. If the application returns ewa statusjdk, EmWeb/ 
Server will continue processing outstanding requests in a round-robin fashion. If the 
application returns ewa_status_error, EmWeb/Server will abort the current request 
(as if ewsNetHTTPAbort o was called) and continue processing any other outstanding 
requests. The application returns ewa_status_ox_yield to request that EmWeb/ 
Server give up the CPU. In most cases, ewaNetHTTPSendo is called for each buffer's 
worth of HTTP response data generated by the EmWeb/Server. Thus, the CPU used 
by the server can be throttled by adjusting the buffer size available to the server and 
using the ewa_status_ok_yield return code. (See 4.1.1.2. Scheduling, page 29). 
Note that use of this return code requires that the application eventually either 
reschedule processing of the request by invoking ewsRun, or abort the request by 

invoking ewsNetHTTPAbort. 

The application may signal the EmWeb/Server with flow control events to indicate 
congestion on an outbound TCP connection. If a TCP connection's transmit window 
is full, the application may call the following function at any time: 

EwsStatus ewsNetFlowContiol ( EwsContext context ) ; 

This will cause the EmWeb/Server to temporarily suspend processing of the request. 
When the TCP connection's window opens again, the application may invoke the 
following function at any time to notify EmWeb/Server that processing of the request 
may continue: 
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EwsStatus ewsNetUnFlowContiol ( EvsContext context); 

If ewsNetFiovcontroio is called from the ewaNetHTTPsendO function, then the 
application is responsible for transmitting the current buffer. However, 
ewaNetHTTPsendO will not be called again until the application has called 
evsNetunFiovcontioio. Note that if ewsNetFiovcontroio is invoked from outside 
ewaNetHTTPsendO, then EmWeb/Server may call evaNetHrrpsendo once before 
suspending the request. In any case, the application should be prepared to receive 
notification of request completion as described below. 

When the EmWeb/Server has completed processing an HTTP request, or if the 
application aborts an outstanding HTTP request by invoking ewsNetHTTPAborto, it 
invokes the following function which must be provided by the application: 

EwaStatus evaNetHTTPEnd ( EwaNetHandle handle ) ; 

This function should close the TCP connection corresponding to the request and 
return ewa_status_ok or ewa_status_ox_yield on success or ewa_status_error on 
failure. Note that returning ewa_statusj}k_yield causes EmWeb/Server to give up 
the CPU. Otherwise, EmWeb/Server may continue processing other HTTP requests 
in progress. 

if persistent connections are used, it is possible that several HTTP requests will be 
handled over a single TCP/IP connection. For some applications, it is necessary to 
reset application-specific state information and to release application-specific 
dynamic resources after each HTTP request. The following function may be 
provided by the application for this purpose: 

void ewaNetHTTPCleanup ( EwaNetHandle handle ) ; 

This function must be provided by the application or defined as a empty macro. It is 
invoked by EmWeb/Server when a request completes, allowing the application to 
reset any processing state stored in the network handle. Note that for persistent 
connections, this routine may be called several times for the same connection, as 
one connection can be used for multiple requests. This routine will be called before 

evaNetHTTPEndO is invoked. 

The EmWeb/Server must have access to an application-provided null-terminated 
character string representing the HTTP network location (e.g. 
B www.agranat.com:80". Note that the host name (left of the ':') may be a dotted 
decimal IP address. Also note that the '^port-number^ may be omitted if the 
standard' HTTP TCP port #80 is used. This string is returned by the following 
application-provided function (or macro). 

const char • ewaNetLocalHostName ( EvsContext context ) ; 
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4.1.3. Document and Archive Management 

The EmWeb/Compiler generates an archive of one or more documents. Documents 
can be HTML files, JAVA programs, graphical images, or any other information 
resource addressable by a URL Archives may be independently loaded or unloaded 
into the EmWeb/Server. 

In most applications, the entire set of available documents are compiled into a single 
archive and loaded at boot time. However, some applications may desire to 
dynamically load archives at run-time as needed in order to reduce memory 
requirements. In fact, applications may implement a scheme similar to virtual memory 
page swapping under some operating systems to cache an active set of documents in 
memory while storing other documents in a secondary storage area. Such a 
secondary storage area could be in FL^SH memory, disk, or on a remote server using 
TFTP or other protocols to load documents at run-time. 

An EmWeb archive consists of two components. First, there is the archive data 
component containing the database of compressed documents, information about 
how to construct dynamic documents at run-time, access controls, etc. Second, there 
is the archive object component containing the run-time object code used for the 
construction of dynamic documents, etc. 

Operating systems supporting the run-time loading and linking of object code may off- 
load both the data and object archive components to a secondary storage area. 
Otherwise, only the data components are off-loaded while the object components are 
statically linked into the run-time executable image. 

Each archive contains an archive descriptor in the object component. The archive 
descriptor is referenced by a public symbol generated by the EmWeb/Compiler. 

4.1.3.1. Installing and Removing Archives 

In order to activate an archive at run-time, the application must invoke 
ewsDocumentinscaiiAxchive with parameters indicating the address of the data 
component and the archive descriptor of the object component. 

EwsStatus ewsDocumen tins tallAr chive 

( EwsArchive descriptor, const uintB *datap ); 

This function may return one of the following status codes: 

EWS_STATUS_OK The archive was installed successfully 

EWS_STATUS_BAD_MAGIC The data or object portion of the archive is 

invalid or corrupt. This may happen if the 
EmWeb/Server is configured for a big-endian 
archive when the EmWeb/Compiler generated a 
little-endian archive, or vice versa. 

EWS_STATUS_BAD_VERSION The archive generated by the EmWeb/Compiler 

is not understood by the EmWeb/Server . 

EWS_STATUS_ALREADY_EXISTS The archive has already been installed. 
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EWS STATUS NO RESOURCES 



EWS STATUS IN USE 



The archive contains a document with a URL 
that has been previously loaded from a 
different archive. 

Insufficient dynamic memory is available to 
install the archive. 



The archive may be deactivated by invoking ewsDocumentRemoveArchive. 



EwsStatus ewsDocumentRemoveArchive ( EwsAr chive descriptor ) ; 

These functions return ews_status_ok on success. Otherwise, ew_status_in_use is 
returned indicating that the archive contains documents that are either being 
processed by outstanding HTTP requests or that have been cloned to other URLs. 

The fixed data component of an archive contains the name of the archive and the 
date it was created by the EmWeb/Compiler. These values may be retrieved as 
follows: 

const char * ewsDocumentArchiyeName ( const uincs * da tap ) ; 
const char * ewsDocumentArchiveDate ( const uint8 * da tap ) ; 
const char * ewsDocumentArchiveDatel036 ( const uints *datap ); 

4.1.3.2. Demand Loading 

In order to implement on-demand archive loading, the application may register 
document URLs with the Em Web/Server which are valid but not loaded. This is done 
by invoking the following function: 

EwsDocument 

ewsDocumentRegister (const char *url, EwaDocumentHandle handle); 

This function returns an EmWeb/Server document descriptor of type EwsDocument, 
or ews_document_null on error. The handle is an application-defined value passed 
back unchanged to the application in ewaDocumentFauit as shown below. 

If a registered document is requested by a Web browser, then EmWeb/Server 
notifies the application by invoking the following application-provided function: 

Ewastatus 

ewaDocumentFauit ( EwsContext context, EwaDocumentHandle handle ); 

At this point, the application may load a new archive (possibly removing a previously 
installed archive to make room). When the archive containing the page is installed, 
the EmWeb/Server automatically completes processing the request when the 
archive is loaded. The request can be aborted either immediately by returning 
ewa_statusjsrror from the ewaDocumentFauit function, or by invoking 

ewsNetHTTPAbort. 

Once a document is registered, there is no need to re-register it in the event that the 
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corresponding archive is removed. EmWeb/Server remembers that the document 
has been registered as dynamically loadable. However, the application may de- 
register a document by invoking the following function: 

EwsStatus ewsDocumentDeiegister ( EwsDocumenc document ) ; 

This function returns ews_status_ok on success. Otherwise, ews_status_in_use is 
returned indicating that the document was cloned or not registered. 

4.1.3.3. Cloning 

Documents may be cloned and assigned to a new URL This allows multiple 
instances of a document to exist while minimizing the storage requirements; An 
application-specific handle can be used to identify an instance of a document from 
the request context. 

The application clones a document by invoking the following function: 

EwsDocumentev/sDocumentClone 
( const char *baseuil, const char »newurl, EwaDocumentHandle handle ) ; 

This function returns a document descriptor for the clone, or ewsjdocumentjjull on 
error. 

The cloned document may be removed by invoking the following function: 

EwsStatus ewsDocumentRemove ( EwsDocument document ) ; 

This function returns one of the following status codes: 

EWS_STATUS_OK The document was successfully removed 

EWS_STATUS_NOT_CLONED The document is not a clone. 

EWS_STATUS_IN_USE The document is itself cloned. The clone of 

the clone must be removed first. 

All clones created from documents in an archive must be removed before the archive 
can be removed. 

Note that the application's document handle is made available to the application in 
the HTTP request context by invoking the following function: 

EwaDocumentHandle ewsContextDocumentHandle ( EvsContext context ) ; 

If the document corresponding to the context was not cloned or registered by the 
application, then this function returns ewajdocument_handle_null. 

4.1.3.4. URL Rewriting 

In some applications, it may be desirable to translate between URLs advertised to 
the outside world and URLs configured in the archive. The optional URL hook feature 
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provides the application with an opportunity to rewrite a requested URL before 
EmWeb/Sen/er looks up the URL in its archive database. The following function (or 
macro) may.be provided by the application for this purpose: 

char * ewaURLHook ( EwsContext context, char * url ) ; 

This function passes the requested URL and request context to the application. The 
application may simply return url if no rewriting is desired, or it may return an 
absolute local URL to substitute. The returned URL is looked up in the archive and 
served as if requested directly. If the application returns null, the request is aborted. 

This functionality is intended to allow the application to select a subdirectory of 
documents based upon requested language, content encodings, and other 
information available from the request context. 

Note that this function may rewrite and return any portion of the uri string parameter 
(provided that the string's length is not increased), or return a completely different 
string buffer instead. If a different buffer is used, the server copies the value 
immediately. 

4.1 .3.5. Document Data Access 

In some applications, it may be desirable to access the content of a file pointed to by 
a URL directly (e.g. data files used by CGI scripts, etc.). The following function is 
optionally provided by the EmWeb/Server to the application for this purpose: 

EwsStatus ewsDocumentData 

( const char * uil, uiiit32 *bytesp, const uint8 **datapp ); 

This function looks up the requested URL and, if found, updates *bytesp and 
•datapp with the length and pointer to the start of raw data in the file. (Note that the 
data is compressed if compression is enabled). Since EmWeb employs a proprietary 
compression technique, the application should specifically disable compression of 
files it wishes to access this way by using the nocompress attribute in the appropriate 
^access file (see 3.4. ^ACCESS Files, page 22). This function returns ews_status_ok 
on success, or ews_status_not_found on failure. 

4.1 .4. Authentication and Security 

HTTP Authorization techniques are discussed in the HTTP specifications (see 7. 
References, page 87). Knowledge of these principles is essential for correct use of 
these authorization interfaces. 

One or more HTML documents can be associated with a single "realm". A realm is a 
case-sensitive ASCII string that defines a "protection space" for the associated 
document(s). 

Each realm may have zero or more authentication entries associated with it. If a realm 
has no authentication entries, then documents in that realm are not accessible. 



Copyright © 1997Agranat Systems, Inc. Page 39 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 

EmWeb™ Functional Specification 



-68- 
Confidential 



PCMJS97/13817 



EmWeb/Server 



A client that attempts to access a document associated with a non-null realm is 
required to authenticate itself. To authenticate, the client must send authentication 
parameters valid for at least one authentication entry for that document's realm. 
Clients that do not authenticate are denied access to the requested document. 

For example, assume a realm exists called "foo". it has three authentication entries 
associated with it (two using the "basic cookie" scheme defined in the HTTP/1.0 
specification, and one using the "digest" scheme defined in the HTTP/1.1 
specification): 

REALM: "foo" 

Authentication Entry 1: 
Type: "basic" 

parameters: Username-^userl " 
Password»"guest" 
EwaAuthHandle: application 1 s entryl identifier 

Authentication Entry 2: 
Type: "digest" * 
parameters: Username B "user2" 

Password«"637I8U9 " 
*DigestRequiied=FALSE 
EwaAuthHandle: <application* s entry2 identified 

Authentication Entry 3 : 
Type: "basic" 

parameters : Username* "Sinclair" 

Password" "babylon" 
EwaAuthHandle: Application* s entry3 identified 

When a client attempts to access a document associated with realm "too", it needs to 
authenticate against one of the above entries. Which one the client authenticates 
against is at its discretion. 

When a client does authenticate against one of the above entries, the EwaAuthHandle 
for that entry is stored in the current context for the HTTP request (Ewscontext). The 
datatype of this EwaAuthHandle is implementation-defined. 

The following types are defined for the authorization application interface (from src/ 

include/ews_auth.h) : 
/* 

* Defines the authorization schemes supported by the EmWeb server. 

* New schemes will be added as they are supported. 
*/ 

typedef enum 
{ 

ews Au t hS chemeBa sic, 
ewsAu thSchemeDi ges t , 
ews Au thSchemeManua IBa sic, 
ews Au thSchemeManua IDiges t , 
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ewsAuthMaxScheme /* count of supported schemes */ 

} EwsAuthScheme; 

* this structure defines parameters for all the supported 

* authorization types. New parameters will be added in 

* to this structure in the future 
*/ 

typedef union 
{ 

#ifdef EW_C0NFI G_OPTI ON_AUTH JBAS I C 
struct 

{ 

char *userName; 
char '^password; 
} basic; 

#endif /* EW_CONFIG_OPTION_AUTH_BASIC */ 
#ifdef EW_CONFIG_OPTION_AUTH__DIGEST 

struct 

I 

char *usexName; 
char *passWord; 

# ifdef EW_C0NFIG_OPTioN_AUTHJDIGEST_M 

boolean digestRequired; /* require message data verification •/ 

# endif /* EW_CONFIG_OPTION_AUTHJ)IGEST_M •/ 
} digest; 

#endif /*. EW_CONFIG_OPTION_AUTH_DIGEST */ 

char reservedl; 
} EwsAuthParameters; 

/* 

* This structure represents a single authorization entry. 
*/ 

typedef struct 
{ 

EwsAu thscheme s cheme ; 
EwsAuthParameters params; 

EwaAuthHandle handle; /* user defined */ 
} EwsAuthorization; 

An authorization entry may be created by invoking the following function: 

EwsAuthHandle ewsAuthRegister 

( const char *realm, const EwsAuthorization ^authorization ); 

This function returns an EmWeb/Server authorization handle which corresponds to the 
authorization entry, or ews_auth_handle_null on failure. The entry contains the triplet 
(authorization scheme (e.g. basic cookie), scheme-specific parameters (e.g. user and 
password) ( application-specific authorization handle). 

The application-specific authorization handle corresponding to the authentication 
validating a particular HTTP request is available from the context as follows: 
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EwaAuthHandle ewsContextAuthHandle ( EwsContext context ) ; 

The application may remove a previously registered authorization handle by invoking 
the following function: 

EwsStatus ewsAuthRemove ( EwsAuthHandle authorization ) ; 

This function returns ews_status_ok on success. Otherwise, an error code is returned 
(there are presently no conditions that result in error). 

By default, documents assigned to a non-null realm are protected and may only be 
accessed by authorized users. It may be desirable to enable or disable a realm's 
access controls. The following function disables access control for a realm making 
documents assigned to the realm accessible to everyone. 

EwsStatus ewsAuthRealtnDisable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status_bad_realm if the realm 
was not defined by any loaded archives. 

The following function enables access control for a realm making documents assigned 
to the realm protected. Protected documents may only be accessed by authorized 
users. 

EwsStatus ewsAuthRealmEnable ( const char * realm ) ; 

This function returns ews_status_ok on success, or ews_status _bad_realm if the realm 
was not defined by any loaded archives. 

The following function (or macro) must be provided by the application. The function is 
invoked by EmWeb/Server to get a realm qualifier string from the application. The 
qualifier string is concatenated with the base realm name in authentication protocol 
messages such that browsers may differentiate between realms of the same name 
appearing in multiple servers. 

const char *ewaAuthRealmQualif iex ( void ) ; 

The application would typically return the string "©hostname", where hostname is the 
server's local host name or IP address. The application may return null if no qualifier 
is desired. 

4.1.4.1. Basic Authentication 

The Basic authentication scheme requires the browser client to transmit a Base54 
encoded username and password to the server for authentication. While no less 
secure than SNMP v1 , Basic authentication is vulnerable to network monitoring and 
replay attacks. 

The authentication parameters for Basic authentication are simply the username and 
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password represented as null-terminated character strings. 
4.1 .4.2. Manual Basic Authentication 

For some applications, it may be impossible to obtain the Basic authentication 
usemame/password pair prior to receiving requests for a document. Instead, the 
Basic authentication username/password may be stored in a remote secure 
database. This database would need to be queried for the usemame/password as 
each request requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
ewsAuthSchemeManualBasic. This scheme is available only if the build option 
ew_configjdption_auth_mbasic is defined. Once defined, the application must 
provide the following interface: 

boolean ewaAuthCheckBasic (EwsCont ex t context 

, const char * realm 
, const char *basicCookie 
, const char *userName 
, const char *passwoxd ); 

The ewsAuthSchemeManualBasic scheme can be registered for any realm by using 
the ewsAuthRegister function. The scheme field of the EwsAuthorization parameter 
must be set to ewsAuthSchemeManualBasic, and the application handle can be set in 
the handle field. The params field is not used by the manual basic scheme. Manual 
basic can only be registered once per realm. If there are "non-manual" 
(evsAuthschemeBasic) Basic authorization entries registered to the same realm as a 
manual Basic entry, the "non-manual" authorization entries will be given preference. 
If no "non-manual" authorization entries match the request, then ewaAuthCheckBasic 
will be called. 

The EmWeb/Server will invoke the application's ewaAuthCheckBasic function when 
authenticating a request for a realm protected by the manual basic scheme, unless 
a n non-manuaI n basic authorization entry matched. The application's 
ewaAuthCheckBasic function must now determine whether or not the authorization is 
valid. This function is passed the context, requested document's realm, and the 
base64-encoded basic cookie from the Authorization header (as specified in RFC 
2068). If the build option ew_config_option_auth_mbasic_decode is defined, then 
userwame and password will point to the usemame/password strings decoded from 
the basiccookie, otherwise these pointers are null. All strings are null terminated, 
and should not be modified by the application. 

The return value from ewaAuthCheckBasic determines how the server will respond to 
the request. If false is returned, access will be denied. If true is returned, access 
will be granted . 

Optionally, the application can suspend the context from within ewaAuthCheckBasic 
using ewssuspend. EmWeb/Server will ignore the return value in this case. When the 
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context is later resumed by evsResume, the ewaAuthcheckBasic function will be 
reinvoked by EmWeb/Server. 

The application may abort the context from within ewaAuthcheckBasic by calling 

ewsNetHTTPAbort. 

4.1 .4.3. Digest Authentication 

The Digest authentication scheme challenges the browser client using a "nonce" 
value. The client responds with a valid cryptographic checksum of the username, 
secret password, the given nonce value, the HTTP request method, and the 
requested URL This avoids sending the secret password over the network- 
Furthermore, by generating unique nonce values, the server can make replay and 
other forms of attack impractical. 

Note: EmWeb's digest authentication support is derived from 
the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 

Note: Digest authentication is currently an internet proposed 
standard and is not yet supported by many browsers. 

The authentication parameters for Digest authentication include the username and 
password represented as null-terminated character strings. In addition, one 
additional boolean parameter is defined as follows: 

digestRequired 

If true, the EmWeb/Server will require that the client provide a valid 
message digest to prevent forgery of the request message. This requires 
significantly more computation and is not supported by most browsers. 

The application is required to define the application-specific structure called 
EwaAuthNonce. The EwaAuthNonce structure is application-specific and contains 
parameters to be used in calculating (via MD5 hash of the structure's contents) a 
unique nonce value. We recommend including the clients IP address, timestamp, a 
server-wide secret key, and any other random bits the application desires. 

Two additional functions must be provided by the application for the generation and 
verification of nonce values as follows: 

First, the ewaAuthNoncecreate ( > function is called by EmWeb/Server in response to 
an unauthenticated request for a document to request that the application initialize 
the EvaAuthflonce structure. 

void 

ewaAuthNoncecreate 



(EwsContext context 
, const char *realm 
,EwaAuthNonce *noncep ); 
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The application should initialize the EwaAuthNonce structure. The request context 
and realm are provided as inputs. For example, a typical application could read the 
application-specific network handle from the request context to determine the client's 
IP address. 

Second, the evaAuthaoncechecko function is called by EmWeb/Server in response 
to a client's request to authenticate against a nonce value previously initialized by 

the application in ewaAuthNoncedea te () . 

typedef enum EwaAu th>J one eStatus_e 
{ 

ewaAu thNonceOK, /* nonce value valid foi request */ 

evaAuthNonceLastOK, /* nonce value valid, but won't be again */ 

ewaAuthNonceStale, /* nonce value is stale, generate new nonce */ 

ewaAu thNonceDenied /* nonce value is invalid */ 
} EwaAuthKonceStatus; 

EwaAuthNonceStatus 
ewaAu thMonceCheck 

(EwsContext context ■ 

, const char * realm 

, EwaAuthNonce *noncep, uintf count ); 

This function is called by EmWeb/Server to verify that the nonce is valid for the 
current request. The count parameter indicates the number of times this nonce has 
been used previously (i.e. zero on the first call). The application may decide to 
accept the nonce by returning ewaAu thNonceox or ewaAu chwonceLastoK. The 
ewaAu thNonceLastox is used to signal to the server that the nonce value is valid this 
time, but will not be valid if used again. The server uses this information to generate 
a new nonce and pass a next nonce value to the browser to be used on the next 
request. Otherwise, the application may decide to expire the nonce (because it has 
been used too many times, because too much time has gone by since it was created, 
or any other reason that the application decides) by returning ewaAu th^onces tale, or 
refuse to authenticate (because the client IP address doesn't match) by returning 

ewaAu thNonceDeni ed. 

4.1 A4. Manual Digest Authentication 

For some applications, it may be impossible to obtain the digest authentication 
username/password pairs prior to receiving requests for a document, instead, the 
digest authentication username/password may be stored on a remote server. This 
server would heed to be queried for the username/password as each request 
requiring authentication is processed. 

In order to support this, a special type of authentication scheme is defined: 
ewsAuthschemeManuaiDigest. This scheme is available only if the build option 
ew_config_option_aoth_mdigest is defined. Once defined, the application must 
provide the following interface: 
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boolean evaAuthcheckDigest ( EwsConcext context 

, const char *realm 
, const EvaAuthUonce *noncep 
, const char *userName 
, const char «*digest }; 

The ewsAuthschemeManuaiDigest scheme can be registered for any realm by using 
the evsAuthRegister function. The scheme field of the EvsAuthorization parameter 
must be set to ewsAuthschemeManuaiDigest, and the application handle can be set in 
the handle field. The params. digest. digestRequired flag may be used if the 
ewj:onfig_option_aoth_digest_m build option is defined. All other parameters are 
noTused by the manual digest scheme. Manual digest can be registered once per 
realm. If there are "non-manual" (evsAuthschemeDigest) digest authorization entries 
registered to the same realm as a manual digest entry, the "non-manual" 
authorization entries will be given preference. If no "non-manual" authorization 
entries match the request, then evaAuthcheciajigest will be called. 

The Em Web/Server will invoke the application's evaAuthcheckDigest function when 
authenticating a request for a realm protected by the manual digest scheme, unless 
a "non-manual" digest authorization entry matched. The application's 
evaAuthcheckDigest function must now determine whether or not the authorization 
is valid. This function is passed the context, the requested document's realm, the 
nonce associated with this request, and the usemame as it appears in the request. 
All strings are null terminated, and should not be modified by the application. 

evaAuthcheckDigest returns a boolean status that determines how the server will 
respond to the request. If false is returned, access will be denied. If true is returned, 
the *digest parameter has been set to a null terminated string containing the ASCII 
string representation of the MD5 checksum of the usemame, realm, and password 
strings. This is referred to the H(A1) value in RFC 2069. For example, if the 
username is "user", password is "password", realm is "foo_realrn\ then ^digest 
should be set to the string representation of MD5( usenfoo_realm:password ), which 
would be: 

•digest » M eafd9339d0U4895926c24ec79af7211" 

The ^digest value is used by the server to validate the response digest and entity- 
digest that are present in the request's Authorization header. If the validation does 
not pass, access will be denied. The memory used by the 'digest value will remain 
referenced by the server until the context of the request is freed. 

Optionally, the application can suspend the context from within evaAuthcheckDigest 
using evssuspend. The return value will be. ignored. When the context is later 
resumed with evsResume, the evaAuthcheckDigest function will be reinvoked. 

The application may abort the context from within evaAuthcheckDigest by calling 

evsNetHTTPAbort. 
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4.1 A5. Application Security Verification 

Some applications may provide their own proprietary form of client authentication. 
These proprietary methods will vary from application to application. For example, an 
application could use the client's IP address to restrict the client's access to certain 
realms. 

EmWeb provides a generic interface that allows an application to provide any 
proprietary checks on the request context and requested realm. This interface 
allows the application to deny service to the client if so desired. 

This interface is made available by defining the f^config^option autkjverify 
build option. The application must then provide the following interface: 

boolean ewaAuthVerifySecurity ( EvsContext context 

, const chai *realm ); 

This function is called by EmWeb/Server after the current request has passed the 
standard authorization procedures described above. For example, if basic 
authentication is enabled on a realm, ewaAuthverifysecuri ty will be called only after 
the basic authentication successfully completes. If digest authentication is used, 
then ewaAuthveiifysecurity is called after the response digest is successfully 
verified, but before the entity-digest is checked (if the 
ew_config_option_authj}igest_m build option is turned on). 

evaAuthverifysecuxity is passed the current context, and a pointer to a null 
terminated string containing the realm. The application can allow the request to 
complete by returning TRUE from evaAuthverifySecurity. If evaAuthverifySecurity 

returns false, the request is denied access. 

evaAuthverifysecuxity is provided only as a secondary security mechanism, and 
can only be used in conjunction with a defined standard security scheme, such as 
basic or digest. 

Optionally, the application can suspend the context from within 
evaAuthverifysecuxity using evssuspend. The return value will be ignored. When 
the context is later resumed, the ewaAuthverifysecuri ty function will be reinvoked. 

The application may abort the context from within ewaAuthverifysecuri ty by calling 
ewsNetHTTPAbort. 

4,1.4.6. Document Realm Assignment 

The authentication realm of a document is typically determined from the ^access 
configuration files by the EmWeb/Compiler. However, it may be desirable to change 
the documents realm assignment at run-time. The following function is optionally 
provided by the EmWeb/Server to the application for this purpose: 

EvsStatus evsDocumentSetRealm ( const char •url, const char *realm ); 



Copyright Q 1997Agranat Systems, Inc. Page 47 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 

EmWeb™ Functional Specification 



-76- 
Conftdential 



PCTYUS97/13817 

EmWeb/Server 



This function returns' ews_status_ok on success, or ews_status_not_found if the 
specified local URL is not installed, or ews_status_no_resources if insufficient 
resources were available to create a new realm. 

4.1.5. Request Context Access 

Each HTTP request received by the EmWeb/Server is assigned a unique context. A 
context handle of type Ewscontext is first returned to the application from the 

ewsNetHTTPStart function. 

Application code responsible for the run-time content of HTML documents (Le. C code 
fragments from <emweb_stking> and <emweb_include>, HTML form processing 
functions ewaFormserve_* and ewaFormsubmi c_*, and raw CGI interface functions 
evaCGistart_* and evaCGiData_0 have access to the corresponding HTTP request 
context. In the case of <emweb_string> and <emweb_include> C code fragments, the 
context is available from the local variable symbol ewscontext. In the case of the form 
and raw CGI processing functions, the context is passed as a parameter. 

Several context access functions are defined which can be called by the application to 
extract information about the current context. For example, the function: 

EwaNetHandle ewsContextNetHandle ( EwsContext context } 

Returns the network handle corresponding to the HTTP context that was passed by 
the application to the EmWeb/Server in the ewsNetHTTPStart function. The following 
table lists these context access functions: 



Context Access Function 


Description 


ewsContextNetHandle 

ewsContextNetHandle ( EwsContext context ) ; 


Returns the network handle that 
was passed by the application to 
EmWeb/Server in the ewsiietHTTP- 
start function. 


EwaDocumentHandle 
ewsContextDocutnentHandle 
( EwsContext context ) ; 


Returns the document handle that 
was passed by the application to 
EmWeb/Server in either the ews- 

DocumentRegister or ewsDocument- 

clone functions, or 

EWAJ}OCUMENT_KANDLE_NULL. 


EwaAuthHandle 
ewsContextAuthHandle 
( EwsContext context ) ; 


Returns the authorization handle 
that was passed by the application 
to EmWeb/Server in the ewsAu- 

thRegister function, Or 
EWA_AOTH_HANDLE_NULL. 
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Context Access Function 


Description 


boolean 

evsContextlsResuming 
( EwsContext context ) ; 


Returns true if this is the first appli- 
cation call-out after a suspended 
request was resumed by calling 
ewsResume. Otherwise, returns 

FALSE. 


uint32 

ewsContextlterations 
( EwsContext context ) ; 


Returns the iteration count (start- 
ing with zero) to an 

<EMWEB_STRING> Or 

<emweb_include> C code fragment 
with the emweb_iterate attribute 
specified. 


uintf 

ewsContextDate ( EwsContext context, 
chai *datap, uintf length ) ; 


Copies the HTTP Date: header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextPiagma ( EwsContext context, 
chai «datap, uintf length ); 


Copies the HTTP pragma : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextFrom { EwsContext context, 
char *datap, uintf length ); 


Copies the HTTP From: header 
into the buffer provided by the 
application and returns the actual 
number of bytes present 


uintf 

ewsContextlfModifiedSince 

( EwsContext context, chai *datap, uintf 

length ) ; 


Copies the HTTP If -modified- 

since: header into the buffer pro- 
vided by the application and 
returns the actual number of bytes 
present. 


uintf 

ewsContextReferer ( EwsContext context, 
char *datap, uintf length ) ; 


Copies the HTTP Ref erer : header 
into the buffer provided by the 
application and returns the actual 
number of bytes present. 


uintf 

ewsContextUser Agent ( EwsContext context, 
char * da tap, uintf length ) ; 


Copies the HTTP User -agent: 

value into the buffer provided by 
the application and returns the 
actual number of bytes present. 
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Context Access Function 


Description 


uintf 

evsContextHost ( EwsContext context, char 
•datap, uintf length ); 


nnnip<; thp HTTP HfKt* value into 

the buffer provided by the applica- 
tion and returns the actual number 
of bytes present. 


uintf 

ewsCGIServerProtocol ( EwsContext context, 
char * da tap, uintf length ) ; 


Copies the HTTP server protocol 
"http/i o n or ,, HTTP/n 9 " into the 
buffer provided by the application 
and returns the actual number of 
bytes present. 


uintf 

evsCGIRequestMethod( EwsContext context, 
rhar *da tan. uintf lenQth ) ; 


Copies the HTTP request method 
"get", "head", or "post" into the 
Dutter provided oy tne application 
and returns the actual number of 
bytes present. 


const char * 

ewsCGXPa tnxnio v twsLontext context ) , 


Returns pointer to CGI extra path 
imormation it present, or null. 


const char * 

ewsCGIScriptName< EwsContext context ); - 


Returns pointer to URL base path 
string. 


uintf 

ewsCGIQueryString( EwsContext context, char 
♦datap, uintf length ); 


Copies the URL query string into 
the buffer provided by the applica- 
tion and returns the actual number 
of bytes present 


uintf 

ewsCGIContentType( EwsContext context, char 
*datap, uintf length ); 


Copies the HTTP Content - type: 

value into the buffer provided by 
the application and returns the 
actual number of bvtes present. 


uintf 

ewsCGIContentLength( EwsContext context ); 


Returns the value of the HTTP 
content- length: header or zero if 
not present. 


uintf 

ewsCGIContentEncodingC EwsContext context, 
char *datap, uintf length ) ; 


Copies the HTTP Content -encod- 
ing: value into the buffer provided 
by the application and returns the 
actual number of bytes present. 



Note that the context access functions that copy values into application-provided 
strings return the actual number of bytes in the value. If the value is not present, then 
these functions return zero. These functions do not overwrite the application buffer 
(i.e. the length parameter shall be honored by EmWeb/Server). However, the function 
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may return a number greater than the length if the application buffer was not large 
enough to accommodate the value. In fact, the length parameter of zero may be used 
to determine the size of the buffer needed. 

4.1.6. Raw CGI 

We believe that one of the greatest features of EmWeb/Server is that the system 
integrator can implement nearly any embedded Web-based application without using 
CGI. 

While Agranat Systems strongly discourages its use, we recognize that some highly 
sophisticated applications may require a raw CGI interface, and so we provide one. 

A URL corresponding to the base name of a CGI script may be specified in the ^access 
file which is processed by the EmWeb/Compiler. The application must provide two 
functions for each CGI script with names derived from the value of the cgi*symboi 
directive in the _access file as follows: 

EwaCGIHandle evaCGIStart_sy/nbci ( Ewscontext context ) ; 

This function is called by EmWeb/Server when a CGI script is first requested by a Web 
server. The application returns a handle that is passed back to the application in the 
second function: 

void evaCGIData_symbcJ ( EwaCGIHandle handle, EwaNetBuffei buf fex ) ; 

This second function is called by EmWeb/Server to pass one or more buffers to the 
application containing raw CGI data (i.e. the HTTP message body) as they are 
received from the network. The application is responsible for knowing where the end 

Of data is from the Content- length: header (available from evsCGIContentLength). 
Restriction: The application's ewaCGIData^symboi function 

must not attempt to access request header information from 
the request context because the network buffer(s) containing 
request headers may have been discarded. Any information 
needed by the application should be copied and saved during 

evaCGIS tax t_symboi. 

The application may generate a standardized HTTP response header by invoking the 
following function: 

EwsStatus evsCGISendStatus 
( Ewscontext context, const chai * status, const chai ^string); 

This function sends an HTTP status line for the appropriate HTTP version. The status 
argument must contain a null-terminated character string containing a three-digit 
HTTP status code followed optionally by descriptive status text, if not NULL, the string 
argument contains a null-terminated character string containing additional headers, 
and/or data. This function returns ews_status_ok on success. Otherwise, an error 
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code (ews_status_bad_state or ews_status_no_resources) is returned. Note that if 
ewsCGisendscatus is to be used, it must be used only once per request, and must be 
used before calling ewsCGIData . 

For example, to send a simple HTML page: ■ 

ewsCGISendStatus ( context, "200 0K M , 
"Content -Type: text/html\r\n M 
"Content -Length: 66\r\n" 
M \r\ri" 

" <HEAD> <TITLE > Example </TITLE> < /HEAD> " 
" <BODY>This is an example < /BODY > " ); 

The application may send additional headers followed by a message body by invoking 
the following function: 

EwsStatus ewsCGIData ( EwsContext context, EwaNetBuffer buffer ) ; 

This function sends the chain of buffers to the Web browser. Note that the application 
must delimit the header and body sections with a blank line sequence in accordance 
with the HTTP specification. To complete the request, the application should invoke 
this function with an ewajjetjbufferjiull buffer descriptor. This causes EmWeb/ 
Server to close the connection. This function returns ews_status_ok on success. 
Otherwise, an error code (ews_status_bad_state) is returned. 

Instead of sending headers and data, the application may instruct EmWeb/Server to 
generate a redirect to a specified URL or, if local, serve a local document as a 
response. To send a redirect response to the browser (for a local or remote document) 
the application may invoke the following function: 

EwsStatus ewsCGIRediiect ( EwsContext context, const chai • uil ); 

To serve a local document as a response, the application may invoke the following 
function: 

EwsStatus ewsContextSendReply ( EwsContext context, char * uil ); 

Note that these functions may not be used in conjunction with ewsCGIData or 
ewsCGisendstatus. The uil parameter may be a relative or absolute URL 

Several CGI environment values are available from the HTTP request context as 
outlined in the Context section above. In addition, the following two functions return 
global server information for conformance with CGI/1 .0: 

const char * ewsCGIServerSof tware ( void ) 

Returns the server software version string, for example n Agianat-Emweb/Ri_o n . 

const char * ewsCGIGatewaylnterf ace ( void ) 
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Returns the gateway interface version string, for example "cgi/i .o n . 
4.1.7. Logging Hook 

The application may optionally provide the following function (or macro) for logging 
HTTP events: 

void evaLogHook(EvsContext context, EwsLogStatus status); 

This function is invoked by EmWeb/Server at least once for each HTTP request, and 
possibly a second time for certain dispositions after a successful request. Possible 
status values include (from sic/inciude/evs_def .h): 

typedef enum EvsLogStatus_e 
{ 



h 

* 200 Request accepted 
*/ 

EWS LOG STATUS_OK, 



* Request dispositions (aftei success 
«/ 

EWS_LOG_STATUS_NO_CONTENT , 
EWS_LOG_STATUS_MOVED_PERMANENTLY , 
£WS_LOG_STATUS_MOVEDJTEMPORARILY , 
EWS_LOG_STATUS_SEE_OTHER , 

EWS LOG STATUS NOT MODIFIED, 



ful request) 



/• 304 not modified sine 



/* 204 no-op form oi ima 
/• 302 link */ 
/* 302 redirect */ 
/* 303 see other •/ 



* 401 Unauthorized 
*/ 

ews_log_status_auth_failed ( 
ews_log~status_auth_forgery , 
ews_log_status_auth~stale , 
ews_log~status_auth_required ( 
ews log~status_aothj)igest_required, 



/* authorization failed 
/• bad message checksum 
/• authorization nonce s 
/* authorization not pre 
/* message digest not pr 



h 

* 400 Bad Request 

£ws_log_status_b ad_request , 
ews_log status_bad_form, 
ews log~status_bad_imagemap, 



h HTTP parse error */ 
/* form data parse error 
/* imagemap query parse 



* Additional errors 
•/ 

EWS_LOG_STATUS_NOT_FOUND, . 
EWS_LOG_STATUS_METHOD_NOT_ALLOWED , 
EWS_LOG_STATUS J.ENGTH JREQUIRED , 
EWSJLOG_STATUS~UNAVAILABLE , 
EWS LOG STATUS_NOT_I IMPLEMENTED , 



/* 4 04 not found or hidd 

/*405 method not allove 

/* 411 length required * 

/* 503 aborted Document 

/* 501 bad method for UR 
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EWS_LOG_STATUS_NO_RESOURCES , 
EWS_LOG_STATUS_IOTERNAL_ERKOR 



/• 500 insufficient reso 
/• 500 internal enor */ 



} EwsLogStatus; 

4.1.8. Local Filesystem Interfaces 

The EmWeb Server provides the ability to manage a filesystem on the serving system. 
The Server supports: 

- uploading a file from a client (browser) to the server 

- serving the contents of a file in response to a URL GET 

In both cases, the filesystem is external to the EmWeb Server. EmWeb assumes 
nothing about the implementation of this filesystem; it can exist on a local disk, non- 
volatile memory, or on an external proxy. All EmWeb requires is the ability to: 

- retrieve/set meta-information about the file (e.g., type, size, modification time, etc.). 

- open a file 

- read a number of bytes from a existing file 

- write a number of bytes to a newly created file 

• dose a file. 

The API that must be supplied to EmWeb to provide these functions is defined below. 
To enable the basic file support, define the preprocessor symbol 

EW_C0NFIG_OPTION_FILE in ew_config.h. 

4.1.8.1. The EwsFileParams structure 

The EwsFileParams structure is defined in the ews_sys .h include file. It is used by the 
EmWeb server to associate meta-information with a local file. The EwsFileParams 
structure consists of a union of two substructures. These substructures correspond 
to the file function that EmWeb is to perform. The f iieFieid structure is used when 
the browser is uploading a file to the server via a form post (see RFC1867). The 
fiieinfo structure is used to serve a file in response to a get for a particular URL 
The individual fields for each of these structures is described in the description 
associated file operation. 

typedef union EwsFileParams_s 
{ 

/♦ 

* fileField - for support of the form INPUT TYPE* FILE field. 

* The server fills out this structure, and passes it to 

• the application when the file is submitted 
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8 ifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
struct 
{ 

const char *fileName; /* file name or NULL */ 

const char *contentType; /* MIME type */ 
const char «contentEncoding; /* content encoding or NULL */ 
const char *contentDisposition; /« Content -disposition : */ 
int32 contentLength; /* length or EWS_CONTENT_LENGTH_UNKNOWN */ 

} fileField; 
# endif /* EW_CONFIG_OPTION_FIELDTYPE_FILE •/ 



/• 

* filelnfo - for support for local file operations {GET, HEAD, OPTIONS, • 

* PUT, DELETE) . This structure is setup by the application when a URL 

* that corresponds to a local file is received. This structure 

* gives the server all it needs to know to handle the file operation. 
•/ 

tf if defined ( EW_CONFIG_OPTION_FILE_GET ) 
struct 
{ 

EwaFiieName fileName; /* file name (opaque) */ 

const char *contentType; /* MIME type */ 

const char •contentEncoding; /* content encoding or NULL •/ 

const char *contentLanguage; /* content language or NULL */ 

const char *eTag; /* HTTP/1.1 cachability tag, oi NULL */ 

const char *lastModif ied; /• modification time (RFC1123) or NULL •/ 

const char *lastModif ied!036 ; /* modification time (RFC1036) or NULL */ 

const char *realm; /* auth realm or NULL */ 

int32 contentLength; /* length oi EV>s_CONTENT_LENGTH_UNKNOWN •/ 

EwsRequestMethod allow; /* allowed methods */ 
/* HEAD & OPTION _always_ allowed by default */ 

) filelnfo; 

char reservedl; 

) EwsFileParams, *EwsFileParamsP; 

4.1.8.2. File Upload 

Support for File Upload is enabled in the EmWeb server by defining the preprocessor 

Symbol EW_C0NFIG_OPTION_FIELDTYPE_FILE in ew_conf ig.h. 

To support file upload, ErnWeb supports the methods described in RFC1867 (Form- 
based File Upload in HTML). At the time of this writing, only Netscape Navigator 
implements this RFC. For more information about RFC1867 and file upload 
support, contact Agranat Systems. 

RFC1867 describes a new form input field of type=file. This form field results in an 
input field that allows a user to enter a filename. This filename is the name of a file 
that is accessible by the browser. On submission of this form, the browser reads the 
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file, and sends the file's contents to server as part o( the post request. 
This file field takes the following form: 

<INPUT TYPE s FILE NAME«na/ne VALUE=value> 



Where name is the name of the form field and value is the default filename to display 
in the form when it is first seived. When the EmWeb/Compiler encounters one of 
these form fields, the following form structure fields are generated: 

char *name; 
EvaFileHandle na/ne_handle; 

The name field is used by the form serve function only. It allows the application to 
override the default file name given when the form is first displayed (note: some 
browsers do not support a default value - call Agranat Systems for more information). 
The namejiandie field is used by the form submit function only. It provides the file 
handle for the submitted file (see the discussion of evaFiiePost below). The status 

for namejiandle iS Set tO (zw_FORM_RETURNED | EW_FORM_DYNAMIC) On SUCCeSSful file 
POST, else EW_FORM_FILE_ERROR. 

When EmWeb receives the submitted file, it allocates an EwsFiieParams structure 
and initializes the f iieFieid substructure. The fiieFieid substructure. is setup using 
the optional file headers that are sent along with the file. The fiieFieid fields are: 

fileName 

Null terminated string containing the name of the file. This is usually 
supplied as the basename of the file (no path information). This field will be 
a null pointer if the browser does not supply a filename. 

contentType 

Null terminated string containing the value of the content -Type header, or 
a null pointer if the content -Type header is not present (assumed to be 

text/plain). 

contentEncoding 

Null terminated string containing the value of the content -Encoding header, 
or a null pointer if the content-Encoding header is not present. 

contentDisposition 

Null terminated string containing the value of the content -Disposition 
header, or a null pointer if the content -Disposition header is not present. 

contentLength 

set to the number of bytes in the file to be posted. If the content -Length 
header is not supplied by the browser, then this field will be set to 
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EWS_CONTENT_LEHGTH_UNKNOWN. 

As soon as EmWeb receives the submitted form containing an input type=file field 
with file content, prior to calling the application's submit function, a call will be made 
to the application interface ewaFilePost: 

EvaFileHandle ewaFilePost ( 

EvsContext context, 

const EvsFilePaiams *params > ; 

This function is provided by the application. The application defines the appropriate 
type for EwaFileHandle, and the value for ewa_file_handle_null, which indicates a 
null EvaFileHandle. The params parameter is initialized by EmWeb as described 
above, and released by EmWeb on return from evaFiiePost. 

ewaFilePost should open a file, and return a EvaFileHandle value that uniquely 
identifies that file. On error, ewaFilePost can return ewa_filej-.-jole_null, which 
will cause EmWeb to discard the contents of the submitted file without discarding the 
other submitted form fields. The application can also call evssuspend to suspend the 
current context. In this case, ewaFilePost will be reinvoked (with 

evsContextlsResuming (context) TRUE) once the application calls evsResume On 

the context. The request can be aborted and the connection closed if ewaFilePost 

invokes evsNetHTTPAboit. 

After ewaFilePost is called, EmWeb will start calling the file write routine: 



sintf ewaFileWiite( EwsContext context, 

EwaFileHandle handle, 
const uints *datap, 
uintf length ) ; 

handle is set to the value that was returned by the ewaFilePost call, datap is a 
pointer to the data to be written, and length is set to the number of bytes that can be 
written from datap. ewaFiiewiite returns the number of bytes written, or < o if an 
error occurred. If < o is returned, EmWeb will discard the rest of the incoming file 
without discarding the other submitted form fields. The application can suspend the 
current context by calling evssuspend from within ewaFiiewiite and returning the 
number of bytes written prior to suspending (can be zero). The application can then 
resume the context by calling evsResume. This will cause evaFiiewrite to be 

reinvoked With evsContextlsResumingt context ) «- TRUE and datap and length 

adjusted by the number returned by the suspended call to evsFiiewiite. The 
application can also call evsaetHTTPAboit to abort the entire request, and close the 
connection. 

After the entire file has been received and written, the application's form f submit 
function will be called. If the status field has been set to ew_form_returned, then the 
name handle contains the file handle for the file as returned by ewaFilePost. It is the 
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responsibility of the form submit function to close the file at this point. 

Note well that once a file handle is returned by ewaFiiePost, it is the responsibility of 
the application to close that file handle during the form submit function. EmWeb/ 
Server will close the file handle if the request is aborted prior to calling the submit 

4.1,8.3. File Serve 

The EmWeb Server allows an application to provide a file external to an EmWeb 
archive for the response to a get request. This functionality is enabled by defining 
the preprocessor symbol ew_config_option_file_get in ew_config.h. 

To serve a file, an application must "mark" a get request URL as representing a non- 
archive file. Once this is done, the EmWeb Server will "open" this file, read data from 
it and serve this data in response to the URL get. After all data is served, EmWeb 
Server will close the file. 

To "mark" a URL as a local file, the application calls the server interface 
evscontextsetFiie during a URL get: 

EwsStatus ewsContextSetFile ( Ews Context context, 

EwsFileParamsP params ) ; 

ewscontextsetFiie can be called from: 

- ewaURLHook once the URL is determined to be a local file entity. 

- an application's form submit function prior to calling ewscontextsendRepiy. In this 
case, the URL passed to ewscontextsendRepiy represents the local file to be served. 

Note that both the ewaURLHook and an application's form submit function can suspend 
the current context using ewssuspend. This allows the application to do any 
asynchronous tasks needed prior to calling ewscontextsetFiie. 

The f iiemf o substructure of the param parameter must be set up by the application 
prior to calling ewscontextsetFiie. This structure gives EmWeb Server all the 
information about the file it needs in order to serve the file as response content. The 
fields are described below: 

EwaFileName fileName 

This field is for use only by the application, EmWeb Server ignores this field. 
The type EwaFileName must be specified by the application. 

contentType 

set to a null terminated string containing the value for the content -Type 
header that is to be sent with the file. 
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contentEncoding 

set to a null terminated string containing the value for the content - 
Encoding header that is sent with the file. If a null pointer, no content- 
Encoding header is sent. 

contentLanguage 

set to a null terminated string containing the value for the content- 
Language header that is sent with the file. If a null pointer, no content - 
Language header is sent. 

eTag 

reserved, must be set to null. 
lastModified 

the last modification date of the file in RFC1 1 23 format as a null terminated 
string. If null, it is assumed that the file should be served each time it is 
requested. 

lastModified1036 

the last modification date of the file in RFC1036 format as a null terminated 
string. Some browsers cannot correctly recognize the RFC1123 format, so 
this field should be set in addition to the lastModified field. Call Agranat 
Systems for more information. 

realm 

the realm the request should be authenticated against for this file as a null 
terminated string, else null if no authorization required. Authorization is 
only checked when the file is served as a result of calling ewsContextSetFile 
from ewaURLHook - the realm used to protect the form submission is used 
implicitly when serving the file as a result of a ewsContextSendReply. 

contentLength 

Set to the number of bytes in the file, else ews_cootent_length_unknokn if 
the file's length is unknown. 

allow 

reserved, mUSt be Set tO evsRequestMethodGet, 

EmWeb/Server references the paxam parameter for the duration of the file operation. 
As such, this parameter must be accessible throughout the life of the request - 
beyond the context of the evacontextsetme call. It can be safely deallocated by the 
application during the ewaNetHTrpcieanup call. 

Once the URL has been "marked" by the ewscontextsetFiie'call, EmWeb/Server 
will open the file using the ewari leGet interface: 
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EwaFileHandle ewaFileGet( EwsConcexc context, 

const chai *uxl, 
const EwsFilePaiamsP params ) ; 

The uii parameter is the URL that was "marked" as a file access, params is the 
EwsFiieParams structure that was passed to ewscontextsetFiie. The application 
defines the appropriate type for EwaFileHandle, and the value for 

EWA_FI LE_HANDLE JNULL , Which indicates a NULL EwaFileHandle. 

ewaFiiecet should open the file identified by paiams and uxi, and return a 
EwaFileHandle that uniquely represents the file. On error, ewaFiieGet can return 
ewa_file_handle_null. This causes the connection to abort. If desired, the 
application can suspend the current context by calling ewssuspend from within 
ewaFiieGet. The context can be resumed at a later time by calling ewsResume. 

ewaFiieGet Will be reinvoked (with ewsContextlsResuming ( context ) =° TRUE). 

Once the file has been opened by ewaFiieGet, Em Web/Server will read the file by 

Calling ewaFileRead: 

sintf ewaFileRead< EwsContext context, 

EwaFileHandle handle, 
uint8 -da tap-, 
uintf length ) ; 



This function should copy up to length bytes into the area of memory starting at 
da tap. handle is set to the file handle returned by ewaFiieGet. On return, 
ewaFileRead should return the number of bytes written into da tap, which can be less 
than length. On error, < o should be returned (this causes the request to be aborted 
and the connection close). This function can suspend by calling ewssuspend and 
returning the number of bytes written into da tap (can be zero). When the file 
described by handle has been completely read, this routine must return zero. 
Returning zero indicates that End-of-File has been reached (except when 
ewssuspend has been called prior to returning). 

Once all file data has been read, EmWeb/Server will close the file by calling 
ewaFileClose: 

void ewaFileClose ( EwaFileHandle handle, EwsStatus status ) ; 



ewaFileClose Should dose the file associated With handle (the EwsFiieParams 

structure can be safely deallocated at this point), status will be set to ews status ok 
on successful completion of the file serve, otherwise it will be set to an error code. 
EmWeb/Server will call this function to close a file handle during an aborted request 
prior to calling ewawetHTTPEnd. Note that this function does not support suspension. 
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4.2. Application Interface Examples 
This section is intended to illustrate the use of application interface functions under 
various scenarios. 

The following tables illustrates the application interfaces used in the simplest EmWeb/ 
Server configuration. 
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Appiication->Server 
(Initialization) 


Server -> 
Application 


Description 


ewslnit 


evaAlloc 


Application initializes Em Web/Server. 
The server may allocate run-time 
memory resources. 


evsDocumentlnstallAi • 
chive 

evsAuthRegister 


evaAlloc 


Application installs one or more docu- 
ment archives and registers zero or 
more authenticated users. The server 
allocates run-time memory resources 
for its internal databases. 



Application->Server 
(HTTP Transaction) 


Server -> 
Application 


Description 


evsNetHTTPStaxt 


evaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 


evaAlloc 

evaNetBuf feiFiee 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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Application->Server 
(HTTP Transaction) 


Server -> 
Application 


Description 


ewsRun 


<emweb_string> 
<emweb~inclui>e> 

ewaFormSeive * 
ewaFormSubmi t_* 
evaCGIStart_* 
evaCGIData_* 


The server invokes the application 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. 




ewaNetBuf fexAl- 

IOC 

ewaNetHTTPSend 
( STATU S_OK) 


The server allocates network buffers 
as needed, fills thern with HTTP 
response data, and sends them to the 
application for transmission. 




ewaFiee 

ewaNetBuf f eiFiee 
evaNetHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point. 


The next table illustrates a typical HTTP transaction during which the application 
instructs the EmWeb/Server to yield control of the CPU. 


AppIication->Server 
(Scheduling) 


Server -> 
Application 


Description 


ewsNecHTTPStar t 


ewaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources lor the request. 


ewsNetRTTPReceive 


ewaAlloc 

evaNe tBuf f ei Fi ee 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 


ewsRun 


<EMWEB_STRING> 
<EMWEB_INCLUDE> 
ewaFoimServe_* 
evaFoimSubmit_* 


The server invokes the application 
code attached to the requested docu- 
ment. 
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Application->Server 
(Scheduling) 


Server -> 
Application 


Description 


ewsSuspend 




The application suspends the request. 
Processing on the request stops until 
resumed. 


evsResume 


<EMWEB_STRING> 
< EMWEB INCLUDE > 
ev*aFormServe_* 
evaFoimSubmi t_« ; 


The application resumes the request. 
Thp <5prvpr rp-invokes the aDDlication 
code attached to the requested docu- 
ment in order to construct a response 
on-the-fly. > 




ewaNetBuffei Al- 
loc 

evaNetHTTPSend 
<STATUS_YIELD) 


The server allocates and sends a ' 
response buffer. The application trans- 
mits the data and requests that the 
server yield the CPU. 


evsRun 


pwaNptEuf f eiAl • 

loc 

ewaNetHTTPSend 
(STATUSJTIELD) 


The aoolication reschedules the 
server. The server sends the next 
buffer. 


evsRun 


ewaNetBuf f eiFiee 

evaFiee . . . 
evaNetHTTPEnd 


The application reschedules the 
server. The server releases resources 
and terminates processing of the 
request. 


The next table illustrates a typical scenario in which the application aborts processing of 
an incomplete HTTP request. 


App!ication->Server 
(Abort) 


Server -> 
Application 


Description 


evsNetHTTPStait 


ewaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
EmWeb/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 


evaAlloc 

ewaNe tBuf f ei Fx e e 


Application accepts request data from 
the network and passes it to the server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at 
this point. 
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AppIication->Server 
(Abort) 


Server -> 
Application 


Description 


evsNetHTTPAboi t 


ewaFiee 

ewaNe tBuf f ei Fi ee 
ewaNe tHTTPEnd ' 


Application requests abort of HTTP 
transaction in progress. Server 
releases resources and terminates 
request. 


• The next table illustrates the on-demand archive loading feature of ErnWeb. 


AppIication->Server 
(Demand Loading) 


Server -> 
Application 


Description 


ewsDocumenCRegister 


ewaAlloc . . . 


Application registers a URL with 
EmWeb/Serverthat is not loaded. 


evsNetHTTPStart 


ewaAlloc 


Application accepts a new HTTP TCP 
connection request and informs the 
Em Web/Server. The server allocates 
memory resources for the request. 


evsNetHTTPReceive 


ewaAlloc 

ewaNetBuf f exFiee 


Application accepts request data from 
tne networK ana passes it to me server 
for processing. The server may allo- 
cate memory resources to process the 
request as needed. Some network 
buffers received may be released at | 
this point. 




evaDocumentFaul t 


The server recognizes the requested 
URL to be a registered document and 
notifies the application. 


evsDocumentlnstallAr • 
chive 




The application loads the archive con- 
taining the document. 


evsRun 


<EMWEB_STRING> 

<EMWEB_INCLUDE> 

ewaFoimSeive_* 

ewaFoxmSubmit_* 

ewaCGIStait_* 

ewaCGIData_* 


The server automatically continues 
processing the request once the docu- 
ment has been loaded. The server 
invokes the application code attached 
to the requested document in order to 
construct a response on-the-fly. 




evaNetBuf f eiAl- 
loc 

ewaNe tHTTPSend 
(STATUS_OK) 


The server allocates network buffers 
as needed, fills them with HTTP 
response data, and sends them to the 
application for transmission. 
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AppIication->Server 
(Demand Loading) 


Server -> 
Application 


Description 




evaFxee 

evaNetBuf f eiFiee 
evaNetHTTPEnd 


The server releases any remaining 
resources associated with the HTTP 
transaction and terminates the 
request. The application closes the 
TCP connection at this point 



4.3. Porting Guidelines 

The EmWeb/Server is distributed as a directory tree of ANSI C files. In order to assure 
the best possible upgrade path and support from Agranat Systems, most of these files 
should not be modified by the system integrator. 

To port EmWeb/Server to a specific target environment foo, a target-specific conf ig . foo 
configuration directory must be created, conf ig. foo contains the target-specific 
configuration files ev_types.h, ev_config.h, and conf ig.mak. These files can be copied 
from the examples provided in the config directory, and modified as appropriate for the 
target. 

To build the server library obj . foo/evs .a f use the following command: 

make CONFIG=foo server 

Note: The configure script may be used on Unix systems to 
automatically generate the configuration files for the local Unix 
development environment target. Typing "make" will build the 
EmWeb/Compiler, the example archives, and the reference 
Unix port. 

4.3.1. Configuration Header Files 

The sic/conf ig/ev_types . h file contains definitions for base C types used throughout 
the EmWeb/Server. Most of these are straightforward and generally do not require 
modification under 32-bit CPU architectures. The one definition which may require 
modification by the system integrator is the preprocessor symbol emweb_endian which 
is defined to either emweb_endianjbig or emweb_endianj-ittle, and reflects the byte- 
order of the target processor (Intel processors are generally little endian while 
Motorola processors are generally big endian). The symbol emweb_akchive_endian 
indicates the byte-order of the archive generated by the Em Web/Compiler. By default, 
the compiler generates big-endian archives unless the -little command-line 
argument is present. Note that it is more efficient if the byte-order of the archive 
matches the byte-order of the target processor. 

The src/config/ev_config.n file definitions are expected to be modified extensively 
for porting Em Web/Server to a particular hardware platform as follows: 
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EW_CONFIG_HTTP_PROTOCOL 

Define the level of protocol conformance desired. Must be set to either 
HTTP_1_0or HTTP J J. 

EW_CONFIG.OPT10N.DATE 

Define to enable generation of HTTP Dace: headers. This function requires 
that the application provide the evaDate function. This is required for 
protocol conformance, but some environments may simply not be able to 
determine the time-of-day. 

EW_CONFIG_OPTION_EXPlRE 

Define to enable generation of HTTP Expire: headers. The symbol 
ews_config_option_date must also be defined. If a dynamic document is 
requested (i.e. a document containing content defined by the application as 
it is being served), then an Expire: header is generated with the current 
time. Otherwise, no Expire: header is generated. The code size may be 
reduced by not defining this symbol. This is recommended for proper HTTP 
caching. 

EW_CONFIG_OPnONJ-ASTJVIQDIFIED 

Define to enable generation of HTTP Last-modified: headers. The symbol 
ews_config_option_date must also be defined, If a static document is 
requested, then the archive creation date is returned to the Web browser. 
Otherwise, the current time is returned to the Web browser. The code size 
may be reduced by not defining this symbol. This is recommended for 
proper HTTP caching. 

EW_CONFIGJ)PnON_CONDlTIONAL_GET 

Define to enable parsing of received if -Modified -since: headers to 
support conditional get functionality defined in the standard. This is 
recommended for proper HTTP caching. 

EW_C0NFIGJ)PT10N_PRAGMA_N0CACHE 

Define To enable generation of "pragma: no -cache" HTTP/1.0 headers for 
documents containing dynamic content. 

EW_CONFIG_OPTION_PERSISTENT 

Define to enable persistent connections. This is recommended, especially 
with HTTP/1.1, for optimum network performance. Persistent connections 
enable the browser to pipeline multiple HTTP requests over a single TCP/ 
IP connection which was not possible in the original HTTP/1.0 specification. 

ew_config_option_chunked_out 

HTTP/1.1 only. Define to enable the generation of chunked encoded data 
during transmission of documents containing dynamic elements. This 
makes maintaining a persistent connection- possible under certain 
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circumstances and is strongly recommended. 

EW_CONFIG_OPTION_CHUNKEDJN 

HTTP/1.1 only. "Required for protocol conformance. Define to enable 
parsing of chunked form data received from the browser. 

EW_CONFIG_OPTlONJVlETHOD_OPTiONS 

Define to enable HTTP/1.1 options method. 

EW_CONFIG_OPTION_METHOD_TRACE 

Define To enable HTTP/1.1 trace method. 

EW_CONFlG_OPTION_CACHE_CONTROL 

Define to enable generation of HTTP/1.1 Cache-Control: headers. 
Recommended for optimum cache control. 

EW_CONFIG_OPTION_STRING ■ 

Define if the application intends to use the <emwe3_string> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_STRING_TYPED 

Define to enable typed emweb_strings (i.e. use of emwebjtype attribute). 

EW_CONFIG_OPTIONJNCLUDE 

Define if the application intends to use the <emweb_include> feature. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG.OPTION.FORM 

Define if the application intends to use the EmWeb form processing 
interfaces. Otherwise, code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTIONJMAGEMAP 

Define if the application intends to use EmWeb imagemaps. Otherwise, 
code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTION_CGI 

Define if the application intends to use the raw CGI application interfaces. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTI0N_LINK 

Define if the application intends to use the link attribute in ^access files. 
Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CLONING 

Define if the application intends to use the ewsDocumentcione application 
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interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_DEMAND_LOADING 

Define if the application intends to use the ewsDocumencRegistei/ 
ewaDocumentFauic application interface. Otherwise, code size may be 
reduced by not defining this symbol. 

EWJ)ONFlG_OPT10NJ30CUMENTJDATA 

Define if the application intends to use the ewsDocumentDaca application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONF!G_OPTION_DOCUMENT_SET_REALM 

Define if the application intends to use the ewsDocumentsetReaim application 
interface. Otherwise, code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CLEANUP 

Define if the application desires to perform a graceful shutdown of the 
Em Web/Server by invoking evsshutdovn. In some application 
environments, graceful shutdown may not be necessary as a system restart 
may be accomplished by a re-boot of the processor. The code size may be 
reduced by not defining this symbol 

EW_CONFIG_OPTION_SCHED 

Define if the application intends to use EmWeb's internal scheduler making 
use of the ewsRun application interface. Otherwise, the code size may be 
reduced by not defining this symbol. . 

EW_CONF!G_OPT10N_SCHED_SUSP_RES 

Define if the application intends to use the ewssuspend/ewsResume 
application interfaces. Otherwise, the code size may be reduced by not 
defining this symbol. 

EW_CONFIG_OPTION_SCHED_FC 

Define if the application intends to use the ewsNetFiovcontroi/ 
unFiowcontxoi application interfaces. Otherwise, the code size may be 
reduced by not defining this symbol. 

EW_CONFIG_OPTION_URL_HOOK 

Define if the application intends to use the URL rewriting feature by 
providing the function evaramook interface. Otherwise, the code size may 
f be reduced by not defining this symbol. 

EW_C0NF1G_0PTI0N_AUTH 

Define to enable support for authentication through the evsAuthRegister 
application interface. Otherwise, the code size may be reduced by not 
defining this symbol. 
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EWJ50NFIG_OPTIONJUJTH_BASIC 

Define to enable support for the HTTP/1.0 basic cookie authentication 
method. The symbol ew_config_option_auth must also be defined. The 
code size may be reduced by noTdefining this symbol. 

EW_CONFIG_OPTIONJUJTH_MBASIC 

Define to enable support for the "manual basic" authentication scheme. The 
code size may be reduced by not defining this symbol, 

EW_CONFIG_OPTIONJVUTHJ}IGEST 

Define to enable support for the HTTP/1.1 digest authentication method. 
The symbol ew_config_option_auth must also be defined. The code size 
may be reduced by not defining this symbol. 

Note: EmWeb's digest authentication support is derived from 
■ the RSA Data Security, Inc. MD5 Message-Digest Algorithm. 
The following legal notice can be found in src/!ib/ew_md5c.c: 

Copyright (C) 1991-2, RSA Data Security, Inc. Created 1991. All 
rights reserved. 

License to copy and use this software is granted provided that it 
is identified as the "RSA Data security, Inc. KD5 Message-Digest 
Algorithm" in all material mentioning or referencing this software 
or this function. 

License is also granted to make and use derivative works provided 
that such works are identified as "derived from the RSA Data 
Security, Inc. MD5 Message-Digest Algorithm' 1 in all material 
mentioning or referencing the derived work. 

RSA Data Security, Inc. makes no representations concerning either 
the merchantability of this software or the suitability of this 
software for any particular purpose. It is provided "as is" 
without express or implied warranty of any kind. 

These notices must be retained in any copies of any part of this 
documentation and/or software. 

EWJ^ONF!G_OPTIONJ\UTH_MD!GEST 

Define to enable support for the "manual digest" authentication scheme. 
The code size may be reduced by not defining this symbol. 

EWj;ONFlG_OPT10N_AUTHJ3IGESTJU 

Define to enable support for the digestRequired parameter used in digest 
authentication. This protects against forged messages using proper 
authentication credentials. The symbol ew_config_option_auth_digest 
must also be defined. The code size may be reduced by not defining this 
symbol. 
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EW.CONFIG.OPTION.AUTH^VERIFY 

Define to enable support for secondary application-defined authentication. 
The code size may be reduced by not defining this symbol. 

EWj;ONFIG_OPTION_RELEASE_UNUSED 

Define to include extra code that attempts to release received network 
buffers as soon as possible if they do not contain information needed for the 
duration of an HTTP request. Otherwise, if HTTP headers are typically 
received in multiple network buffers, the EmWeb/Server may hold on to 
these buffers longer than necessary. 

EW_CONFIG_OPTION^FILE 

Define to include local file system support. The code size may be reduced 
by not defining this symbol 

EW_CONFIG_OPTION_FlLE_GET 

Define to include access to local filesystem for GET method requests. This 
option requires ew_config_option_file. The code size may be reduced by 
not defining this symbol. 

EW^CONFIG_OPT!ON_COMPRESS 

Define to include extra code required for decompression of compressed 
archives. 

EWJJONFIG_OPTION_CONTEXT_DATE 

Define to enable the ewscontextDate application interface. The code size 
may be reduced by not defining this symbol. 

EW_CONFlG_OPTION^CONTEXT_PRAGMA 

Define to enable the evscontextPiagma application interface. The code size 
may be reduced by not defining this symbol. 

EW_CONFIGJDPTION_CONTEXT_FROM 

Define to enable the ewsconcextFrom application interface. The code size 
may be reduced by not defining this symbol. 

EW.CONFIG_OPTION.CONTEXTJF^MODIFIED_SINCE 

Define to enable the ewscontextifModifiedsince application interface. 
Furthermore, EmWeb/Server honors the HTTP if -modified- since: 
header for static documents by comparing to the archive creation date. 
(Note that dynamic documents are always served). The code size may be 
reduced by not defining this symbol. 

EW_CONFIG_OPTION_CONTEXT_REFERER 

Define to enable the ewscontexcRefexer application interface. Otherwise, 
the code size may be reduced by not defining this symbol. 
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EW_CONFIG_OPTION_CONTEXT_USER_AGENT 

Define to enable the evscontextuseiAgent application interlace. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CONTEXT_HOST 

Define to enablelhe ewsContextHost application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_SEND_REPLY 

Define to enable the" ewsContextSendReply application interface 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFlG_OPTION_CGI_SERVER_SOFTWARE 

Define to enable the •v.ccis.rv.rsof twaxe application interface 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE 

Define to enable the ewscciGatewayinteiface application interface 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_SERVER_PROTOCOL 

Define to enable the evscciserveiPxotocoi application interface 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPnON_CGI_REQUEST_METHOD 

Define to enable the evscciRequestMechod application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_PATH_INFO 

Define to enable the evscciPathinfo application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_SCRIPT_NAME 

Define to enable the ewsccisciiptName application interface. Otherwise the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTIONLCGI_QUERY_STRING 

Define to enable the ewsccioueryscring application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_CONTENT_TYPE 

Define to enable the ewsccicontentType application interface. Otherwise 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_CGI_CONTENT_LENGTH 

Define to enable the evsccicontencLength application interface. Otherwise, 
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the code size may be reduced by not defining this symbol. 

EW.CONFIG_OPTION^CGLCONTENT_ENCODlNG 

Define to enable the evsCGicontentEncoding application interface. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FIELDTYPE_RAD10 

Define to enable support for EmWeb HTML form radio buttons. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_FIELDTYPE_SELECT_SINGLE 

Define lo enable support for Em Web HTML form single option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPE_SELECT_MULTIPLE 

Define to enable support for EmWeb HTML form multiple option selection 
boxes. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW.CONFIG^OPTION.FIELDTYPE.CHECKBOX 

Define to enable support for EmWeb HTML form checkbox fields. 
Otherwise, the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FIELDTYPE_TEXT 

Define to enable support for EmWeb HTML form text fields. Otherwise, the 
code size may be reduced by not defining this symbol. 

EW_CONFIG_OPT10N_FIELDTYPEJMAGE 

Define to enable support for EmWeb HTML form image inputs. Otherwise, 
the code size may be reduced by not defining this symbol. 

EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_UINT 

Define to enable support for EmWeb HTML form text fields for unsigned 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_INT 

Define to enable support for EmWeb HTML form text fields for signed 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_C0NF1G_0PTI0N_F1ELDTYPE_HEXJNT 

Define to enable support for EmWeb HTML form text fields for hexadecimal 
integers. Otherwise, the code size may be reduced by not defining this 
symbol. 
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EW_CONFIG_OPT10N_FlELDTYPE_HEX_STRING 

Define to enable support for EmWeb HTML form text fields for hexadecimal 
octet strings. Otherwise, the code size may be reduced by not defining this 
symbol, 

EW_CONF!G_OPTION_FIELDTYPE_DOTTEDlP 

Define to enable support for EmWeb HTML form text fields for dotted IP 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPE_DECNETJV 

Define to enable support for EmWeb HTML form text fields for DECneUV 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_F!ELDTYPEJEEE_MAC 

Define to enable support for EmWeb HTML form text fields for IEEE MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FiELDTYPE_FDDI_MAC 

Define to enable support for EmWeb HTML form text fields for FDD! MAC 
addresses. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION^FIELDTYPE^STD.MAC 

Define to enable support for EmWeb HTML form text fields for big or little 
endian standard MAC addresses. Otherwise, the code size may be reduced 
by not defining this symbol. 

EWJSONFIGJDPTIONJ^ELDTYPEJDID 

Define to enable support for EmWeb HTML form text fields for SN MP object 
identifiers. Otherwise, the code size may be reduced by not defining this 
symbol. 

EW_CONFIG_OPTION_FIELDTYPE_FILE 

Define to enable support for RFC 1867 file upload from browser. This option 
requires ewjtonfigjdptionj^ile. The code size may be reduced by not 
defining this symboL 

EW_CONFlG_OPTlON_BROKENJMS_EXTRA_DATA 

Define to handle non-conformant browsers that place. extra data at the end 
of If-Modified-S.ince: headers. Otherwise, the code size may be reduced by 
not defining this symbol. 
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EW_CONFIG_OPTION_BROKEN_NEED_OPAQUE 

Define to handle non-conformant browsers that require optional opaque 
field in digest authentication headers. Otherwise, the code size may be 
reduced by not defining this symbol. 

EwaNetBuffer 

Define the C type used to represent a buffer descriptor. 

EWA_NET_BUFFER_NULL 

Define the value of a null buffer descriptor used to terminate a chain of 
buffers or indicate no buffers available. 

EwaNetHandle 

Define the C type used for the application-defined network handle passed 
to EmWeb/Server in evsNetjnrpstart and available from the request 

context by ewsContextNetHandle. 

EwaDocumentHandle 

Define the C type used for the application-defined document handle passed 

tO EmWeb/Server in ewsDocumentClone or evsDocumentRegister and 

available from the request context by evscontextDocumentHandie. 

EWA_DOCUMENT_HANDLE_NULL 

Define the value for a null document handle stored in the context for 
documents that have not been cloned or registered. 

EwaAuthHandle 

Define the C type used for the application-defined authorization handle 
passed to EmWeb/Server in ewsAutteegiscer and available from the 

request context by evsContextAuthHandle. 

EWS_AUTH_HANDLE_NULL 

Define the value for a null authorization handle stored in the context for 
requests that have not been authenticated. 

EwaAuthNonce 

Define the C structure containing parameters used in generating nonce 
challenges. 

EwaCGIHandle 

Define the C type used for the application-defined CGI handle passed to 
EmWeb/Seiver from evacGistart_* and returned to the application in 

Subsequent ewaCGIDaca_*. 

EWA_CGI_HANDLE_NULL 

Define the value for a NULL CGI handle stored in the context for CGI 
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requests. 

EWA TASK.LOCK0 

~This application-defined macro is invoked by EmWeb/Server to enter a 
critical region. If the application is preemptive and multiple threads may 
access EmWeb application interface functions simultaneously, then this 
macro should be defined in such a way as to disable preemption. 

EWA TASKJJNLOCK0 

"This application-defined macro is invoked by EmWeb/Server to leave a 
critical region entered by ewajtaskjlocko . 

EMWEB_ERROR0 

This application-defined macro is invoked by EmWeb/Server to report 
serious error conditions, usually a result of improper system integration. 

EMWEB_WARN0 

This application-defined macro is invoked by EmWeb/Server to report an 
error condition for which recovery is possible. 

EMWEBJTRACEO 

This application-defined macro is invoked by EmWeb/Server to trace 

execution for debugging. 

EWA_LOG_HOOK 

Define to enable the ewaLogHooko application interface. Otherwise, the 
code size may be reduced by not defining this symbol. 

EMWEB_SAN!TY 

Define to enable extra code for checking the consistent use of the API and 
internal data structures. This is strongly recommended during initial porting 
and debug. However, the code size may be reduced by not defining this 
symbol. 

EMWEB_HAVE_MEMCPY 

Define to use application-provided run-time memcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_MEMSET 

Define to use application-provided run-time memset library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_SPRINTF 

Define to use application-provided run-time spiintf library function. 
Otherwise, extra server code is included to handle conversions from 
integers to strings (%d, %x). 
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EMWEB_HAVE_STRCPY 

Define to use application-provided run-time scrcpy library function. 
Otherwise, extra server code is included to implement this functionality. 

E M WE B_H A VE_STR LE N 

Define to use application-provided run-time strien library function. 
Otherwise, extra server code is included to implement this functionality. 

EMWEB_HAVE_STRCMP 

Define to use application-provided run-time sticmp library function. 
Otherwise, extra server code is included to implement this functionality. 

EwaFileHandle 

Define the C type used for the application-defined file handle used in the 
local filesystem API. 

EWA_F!LE_HANDLE_NULL 

Define the value for a null file handle as used by the local filesystem API. 

EwaFileName 

Define the C structure used to represent an application-defined filename 
parameter as used by the local filesystem API. 

The following macros may be defined to override EmWeb/Server defaults as follows: 

EWS_FILE_HASH_S!ZE 

Default: 256. Information about each unique URL loaded from an archive, 
registered, or cloned, is maintained in an open hash table for fast lookup. 
This macro may be defined to set the number of entries in the hash table, 
where each entry contains a pointer value. Smaller values will typically 
decrease memory usage while increasing search times. 

EWS_REALM_HASH_SIZE 

Default: 4. Information about each unique realm defined in loaded archives 
or by the ewsDocumentsetReaimo function is maintained in an open hash 
table for fast lookup. This macro may be defined to set the number of entries 
in the hash table, where each entry contains a pointer value. Smaller values 
will typically decrease memory usage while increasing search times. 

EWS_NONCE_QUEUE_SIZE 

Default: 4. If digest authentication is used, outstanding nonce values are 
maintained in a circular queue. This macro may be defined to set the 
maximum number of outstanding nonce values, where each value will 
contain approximately 48 bytes of state information plus the size of the 
application-defined EvaAuthNonce structure. Larger values are 
recommended if one-time nonces are to be used and/or many simultaneous 



Copyright ® 1997Agranat Systems, inc. Page 76 

SUBSTITUTE SHEET (RULE 26) 



REV. 6/20/97 



WO 98/06033 
EmWeb™ Functional Specification 



-105- 
Confidentlal 



PCT/US97/13817 
EmWeb/Seryer 



authenticated requests from different clients are likely. 

EWS.HTTP_STATUS.204, EWS.HTTP_STRING.204 

Default: n No Content", "\r\n". These macros may be used to override the 
status line and message body issued for a no content HTTP response. (This 
status is generated in response to a form submission application function 
returning NULL, orto an undefined region of an imagemap if no default URL 
was specified). 

EWS.HTTP_STATUS.304, EWS_HTTP_STRING_304 

Default; "Not Modified", n \r\n\ These macros may be used to override the 
status line and message body issued for a not modified HTTP response. 
(This status is generated in response to a conditional GET request if the 
requested document has not changed since the "If-Modified-Since:" value). 

EWS.HTTP_STATUS.400, E WS_HTTP_STR 1 N G.40 0 

"Default: "Bad Request" , "\r\n400 Bad Request\r\n". These macros may be 
used to override the status line and message body issued for a bad request 
HTTP response. (This status is generated in response to an HTTP request 
that could not be parsed). • 

E W S.HTTP.ST ATU S_40 1 , E WS.HTTP.STR I N G_40 1 

Default: "Unauthorized", "\r\n401 Unauthorized\r\n". These macros may be 
used to override the status line and message body issued for ah 
unauthorized HTTP response. (This status is generated in response to an 
HTTP request that did not contain proper credentials to access the server). 

EWS.HTTP_STATUS.404, EWS.HTTP.STRING.404 

Default: "Not Found", "\r\n404 Not Found\r\n n . These macros may be used 
to override the status line and message body issued for a not found HTTP 
response. (This status is generated in response to an HTTP requests for an 
unknown or hidden URL). 

EWS.HTTP.STATUS.41 1 , EWS_HTTP.STRING.41 1 

~ Default: "Length Required", "\r\n41 1 Length Required\r\n n . These macros 
may be used to override the status line and message body issued for an 
internal error HTTP response. (This status is generated in response to an 
HTTP/1.1 request containing chunk encoded form data with 
ew_config_option_chunked_in disabled). 

EWS_HTTP.STATUS.500, EWS.HTTP.STRING.500 

"Default: "Internal Error", "\r\n500 Internal Error\r\n n . These macros may be 
used to override the status line and message body issued for an internal 
error HTTP response. (This status is generated in response to an HTTP 
request resulting in a detectable internal error. This should not ever occur.) 
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EWS_HTTP_STATUS_501 , EWS_HTTP_STRING_501 

Default: "Not Implemented", B \r\n501 Not lmp!emented\r\n n . These macros 
may be used to override the status line and message body issued for a not 
implemented HTTP response. (This status is generated in response to an 
HTTP request containing a method not supported by the URL). 

EWS_HTTP_STATUS_503, EWS_HTTP_STRING_503 

Default: "Service Unavailable" , "\r\n503 Service Unavailable\r\n". These 
macros may be used to override the status line and message body issued 
for a service unavailable HTTP response. (This status is generated in 
response to an HTTP request for a registered and unloaded document 
when the. application-specific ewaDocumentFauItO function aborts the 
request rather than loading the archive containing the URL). 

4.3.2. Application-Provided Functions 

The following functions must be provided by the application: 

- System functions 

. ewaAlloc 
. ewaFree 

- Network functions 

. ewaNetBufferAlloc 
. ewaNetBufferFree 
. ewaNetBufferNextGet 
. ewaNetBufferNextSet 
. ewaNetBufferLengthGet 
. ewaNetBufferLengthSet 
. ewaNetBufferDataGet 
. ewaNetBufferDataSet 
. ewaNetHTTPSend 
. ewaNetHTTPEnd 
. ewaNetHTTPCIeanup 
. ewaNetLocalHostName 



The following functions may be provided by the application if certain optional EmWeb/ 
Server features are desired. 

- System functions 

. ewaDate 
. ewaLogHook 
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• Document functions 

, ewaDocumentFauIt 
. ewaURLHook 

- Authentication functions 

. ewaAuthRealmQualifier 

- Digest Authentication functions 

. ewaAuthNonceCreate 
. ewaAuthNonceCheck 

- Manual Authentication functions 

, ewaAuthCheckBasic 
, ewaAuthCheckDigest 
. ewaAuthVerifySecurity 



4A Memory Requirements 

The following table illustrates the approximate incremental executable image size of the 
EmWeb/Server for various configuration options enabled compiled using GNU gcc- 
2.7.0 with -02 for the Intel 486, the Intel i960, and the Motorola MC68000 architectures. 
These values are subject to change without notice. 



Incremental Option 


i486 


i960 


MC68000 


Base EmWeb/Server functionality 


7,380 


7,496 


6,238 


<EMWEB_STRING> 


180 


216 


184 


Typed <EMWEB_STRING>s 


454 


464 


454 


<EMWEB_INCLUDE> 
(requires some additional code 
from <EMWEB_STRING>). 


384 


400 


312 


Base EmWeb HTML form support 


3,124 


3,168 


2,548 


imagemap support 


288 


320 


272 


Base raw CGI support 


640 


656 


578 


URL Link support 


16 


32 


28 


Document cloning 


400 


400 


314 


Document on-demand loading 


492 


520 


440 
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Inrromontal O ntinn 

incrcrneniai upuon 


IHOD 


i960 


MC68000 


Document data access 


64 


72 


74 


Graceful server shutdown 


272 


264 


220 


Request scheduling (yield CPU) 


656 


624 


444 


Proxy (ewsSuspend/ewsResume) 
(requires request scheduling) 


320 


296 


• 242 


Network flow control 
(requires request scheduling) 


368 


288 


264 


UHL rewriting vewaunLnooK; 


Own 


OOP 


1 RA 
I o*f 


base Tiiesysiem suppon 


1 / o 






GET/HEAD from local filesystem 

/Dflnz/rroe Mace f//^Cl/cf£*m C//D ) 

(nequires uaoc in&oy&i&n i &uyj.j 


1,876 


1,480 


1,326 


Base authentication support 


1,168 


1,032 


934 


Basic authentication 


952 


1,056 


824 


Digest authentication 


5,547 


6,732 


5,366 


Client message digest verification 
(requires digest authentication) 


1,335 


1,016 


742 


Manual basic authentication 
(requires basic authentication) 


608 


472 


482 


Manual basic decode 
freouires manual basic) 


336 


352 


198 


Manual riinp<?t a nth enti cation 
(requires digest authentication) 


384 


368 


366 


Manual authentication verification 


144 


144 


128 


Run-time document realm override 


0 


0 


0 


Base HTTP/1.1 support 


1,284 


1,160 


972 


Persistent connections 


883 


616 


IS 4 A 

614 


Generate chunked encoding 
(requires HTTP/1.1) 


828 


784 


632 


Parse chunked encoding 
(requires HTTP/1.1). 


855 


552 


468 


OPTIONS method 


250 


240 


192 
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Incremental Option 


i486 


locfi 

iybu 


MCoBOOL) 


TRACE method 


288 


288 


204 


Generate Cache-Control headers 


122 


128 


96 


Generate Date headers (ewaDate) 


41 


64 


32 


Generate Expire headers 
(ewaDate) 


76 


176 


60 


generate Last-Modified headers 


82 


112 


76 


Conditional get support 


239 


280 


248 


Generate Pragma headers 


35 


48 


34 


Early release of network buffers 


224 


240 


208 


Compression 


525 


584 


462 


Parse Date headers 


64 


56 


72 


Parse Pragma headers 


75 


64 


82 


Parse From headers 


73 


72 


82 


Parse If-Modified-Since headers 


64 


64 


72 


Parse Referer headers 


76 


64 


86 


Parse User-Agent headers 


79 


104 


90 


Parse Host headers 


169 


128 


124 


ewsContextSendReply 


626 


632 


494 


ewsCGIServerSoftware 


31 


40 


30 


ewsCG IG ateway 1 ntert ace 


24 


32 


22 


ewsCGIServerProtocol 


64 


56 


68 


ewsCGIReauestMethod 


64 


64 


68 


ewsCGlPathlnfo 


16 


16 


16 


ewsCGIScriptName 


16 


16 


16 


ewsCGIQueryString 


64 


64 


68 


ewsCGIContentType 


80 


64 


72 


ewsCGIContentLength 


16 


16 


16 


ewsCGIContentEncoding 


64 


64 


72 
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Incremental Option 


i486 


i960 


MC68000 


Form radio buttons 


328 


304 


254 


Form single option select boxes 


57 


64 


62 


Form multiple option select boxes 


128 


144 


124 


Form checkboxes 


96 


96 


92 


Form text fields 


307 


352 


256 


Form image input fields 


93 


104 


86 


Form text fields - unsigned integer 


0 


0 


0 


Form text fields - signed integer 
(requires some code from 
unsigned integer) 


98 


128 


90 


Form text fields • hexadecimal int . 
(requires some code from 
unsigned integer) 


164 


184 


166 


Form text fields - hex string 
(requires some code from 
unsigned integer) 


706 


704 


550 


Form text fields - dotted IP 
(requires some code from 
unsigned integer) 


354 


416 


olu 


Form text fields - DECNet IV 
(requires some code from 
unsigned integer) 


272 


OCA 

352 




Form text fields • IEEE MAC 


144 


160 


13d 


Form text fields - FDDI MAC 
(requires some code from IEEE 
MAC) 


48 


48 


A A 


Form text fields - Standard MAC 
(requires some code from IEEE 
MAC) 


160 


192 


168 


Form text fields • SNMP Object ID 


400 


400 


340 


Form file fileds - file upload 
(requires base filesystem support) 


4,372 


4,232 


3,394 


Broken If-Modified-Since Extra 


84 


128 


124 
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Incremental Option 


i486 


i960 


MC68000 


Broken digest need opaque 


16 


16 


16 


Internal sprintf library 


656 


736 


582 


Internal strcpy library 


112 


336 


46 


Internal strcmp library 


128 


184 


52 


Internal strlen library 


-160 


384 


162 


Internal memcpy library 


160 


80 


-8 


Internal memset library 


16 


16 


-2 


Extra sanity checking code 


1,248 


1,080 


1,008 


Error reporting 


2,498 


2,984 


2,358 


Warning reporting 


2,527 


2,888 


2,350 


Debug tracing 


1,685 


2,392 


1,764 


Logging hook 


704 


1,056 


778 


FULL CONFIGURATION 


52,677 


55,348 


44,740 



Note that some of the configurable options listed in the table above depend on pieces 
of code included from previous options as indicated. The table shows the incremental 
requirements as each option is added from top to bottom. Therefore, the executable 
image size for an arbitrary set of options may be different than the sum of the values 
shown above. 

Additional archive memory requirements include 

- Compressed file contents and embedded application object code (controlled by 
application) 

• 120 bytes per archive 

• 36 bytes per document in archive (plus null-terminated URL string) 

- 12 bytes per <emweb_string> , <emweb_include>, CGI script, or form field 

- null terminated strings for authorization realms, mime types, creation date, etc. 

- compression dictionary (if compression used). 
Additional run-time memory requirements include: 
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- Network buffers (controlled by application). EmWeb/Server typically holds on to 
received buffers containing HTTP headers of interest for the duration of a request, 
and typically allocates only one or two buffers before sending them to the application 
for transmission. 

- 1 ,028 - 1 ,096 bytes total global Em Web state (using defaults for hash table sizes 
which may be overridden by application) 

- 176 - 636 bytes per HTTP request (plus 48-52 bytes for first served document, plus 
48 bytes for decompression context if compressed) 

- 48-52 bytes per nested <emweb_include> document (plus 48 bytes for de- 
compression context if compressed) 

- 40-64 bytes per URL in archive (including clones and registered documents) 

- 20-44 bytes per authorization realm plus null-terminated realm name string 

- 20-28 bytes per authorization entry plus Base64 or MD5 encoding of user/password 
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5. Conformance 

The EmWeb/Server implements the HTTP/1.1 and HTTP/1.0 protocols, and MD5 Digest 
Authentication. 

The EmWeb/Server raw CGI capabilities support the functionality of CGI/1.1, but the 
interfaces are non-standard as they are optimized for the EmWeb/Server environment. In 
addition, some CGI/1.1 interfaces depend upon the specific integration of EmWeb/Server 
into the application environment. 

The EmWeb/Compiler supports HTML/2.0 Forms with RFC 1867 file upload extensions. 



Copyright Q 1997Agranat Systems, inc. Page 85 REV. 6/20/97 

SUBSTITUTE SHEET (RULE 26) 



WO 98/06033 



PCT/US97/13817 



EmWeb 1 Functional Specification Confidential . Release History 

6. Release History 



Release 1.0 (12/23/96) 


General Availability 


Release 1.1 (02/16/97) 


Added network flow-control interfaces 


Release 1.2 (02/26/97) 


Ported to VxWorks 


Release 1.3 (03/07/97) 


Ported to pSOS 


Release 2.0 (04/14/97) 


Added HTTP/1.1 support 
Added support for typed EM WEB.STRlNGs 
Added EMWEB_STATIC cache-control override 
Added support for remote authentication databases' 


Release 2.1 (06/20/97) 


Added native filesystem support 
Added RFC 1867 (file upload from browser) support 
Added support for EMWEBJTYPE-OBJECTJD 
Added support for SNMP Research <mibobj> tags 
Added ewaNetHTTPCIeanupQ interfaces 
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A. EmWeb Application Interface Header Files 



This appendix is intended for reference only and is not part of this specification. The C 
header files listed here are part of the standard EmWeb source distribution and may be 
updated from time to time. 



.A-1. Configuration 

These sample configuration header files are provided in the EmWeb source distribution. It 
is expected that these files will be modified by the system integrator in order to port the 
EmWeb/Server to the target environment. No other files in the EmWeb distribution should 
be modified in any way. 



A-1.1. src/config/ew_types.h 

This files contains definitions for base C* types used throughout the EmWeb product. In 
most environments, this file will not need to be modified except possibly for the definition 
of emwsbjendian and emweb_arch i ve_jsnd i an . However, for some compilers, it may be t 
necessary for the system integrator to modify additional definitions here. 



* ev_types.h,v 1.20 1997/03/31 19:14;25 lawience Exp 

* Product: EmWeb 

* Release: R2_l 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 

* Agranat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 

* (617) 893-7868 

* sales@agranat.com, support@agranat.com 

* http://www.agranat.com/ 

* EmWeb common types 
*/ 

tfifndef _EW_TYPES_H 
#def ine EW TYPES H 
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* C- TYPES 

* The following basic C* types aie defined (see ev_config.h) 
*/ 

tfifndef INT8 

# define INT8 signed char 
« end if 



tfifndef UINT8 

# define UINT8 unsigned chai 
#endif 



tfifndef INT16 

# define INT16 short int 
Sendif 



#ifndef INT32 

# define INT32 long int 
flendif 

Sifndef P_INT 

# define P_INT int 
Sendif 

typedef INT8 int8; 
typedef INT16 intl6; 
typedef INT32 int32; 
typedef UINT8 uint8; 
typedef unsigned INT16 uint!6; 
typedef unsigned INT32 uint32; 



/* an integer the same size as a pointer */ 



/* signed eight bit integer */ 

/* signed sixteen bit integer */ 

/• signed thirty- two bit integer */ 

/• unsigned eight bit integer */ 

/* unsigned sixteen bit integer */ 

/« unsigned thirty -tvo bit integer */ 



* Volatiles for memory shared with devices 



typedef volatile int8 vint8; /• 

typedef volatile intie vintl6; /* 

typedef volatile int32 vint32; /• 

typedef volatile uint8 vuint8; /* 

typedef volatile uintl6 vuinti6; h 

typedef volatile uint32 vuint32; /• 



volatile signed eight bits */ 
volatile signed sixteen bits */ 
volatile signed thirty-two bits •/ 
volatile signed eight bits */ 
volatile unsigned sixteen bits */ 
volatile unsigned thirty -two bits */ 



* FAST TYPES 

* The following types offer the most efficient compilation for optimized speed 

* These are never assumed to be more than 16 bits. 
•/ 

typedef int / sintf; /* signed integer */ 

typedef unsigned uintf ; /* unsigned integer •/ 

/* 

* BOOLEAN 

* The boolean type is used primarily as a function return type. Note that 

* a default representation of TRUE and FALSE aie defined. However, care 

* should be taken to avoid comparing against these values. For most compilers, 

* TRUE .can be any non-zero integer while FALSE is defined as zero. 
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•/ 

#define TRUE - (0 = = 0) 

#define FALSE ( ITKUE) 

typedef uintf boolean; /* true or false (non-2ero or zero) */ 

/* 

* POINTER INTEGER 

* The pointer integer is an unsigned integer large enough to accommodate a 

* machine pointer. This is used primarily for generic pointer arithmetic. 
•/ 

typedef P_INT pint; /* unsigned integer for pointer */ 

/* 

* NULL POINTER 
flifndef NULL 

^define NULL (0) 
flendif /* NULL */ 



1234 
4321 

typedef enum Endian_e 
{ 

ewBigEndian = EMWEB_ENDIAN_BIG , 
evLittleEndian * EMWEB_ENDIAN_LITTLE 
} Endian; 

#if o 
/* 

* EMWEB_ENDIAN ♦ Define as endian-ness of target architecture 
./ 

#ifndef EMWEB_ENDIAN 

# ifdef HAVE_CONFIG_H 

# include "config.h" 

# ifdef WORDS_BI GENDIAN 

# define EMWEB_ENDIAN EMWEB_ENDIAN_BIG 

# else 

# define EMWEB_ENDIAN .EMWEB_ENDIAN_LITTLE 

# endif 

# else 

# pragma error "Define EMWEB_ENDIAN for target" 

# endif 
#else 

# pragma error "Define EMWEB_ENDIAN for target 1 ' 
#endif /• HAVE_CONFIG_H */ 

Sendif /* !TBD? */ 

/• 

* EMWEB ARCHIVE ENDIAN 



/* 

* ENDIAN (don't change these) 
*/ 

ftdefine EMWEB_ENDIAN_BIG 
^define EMWEB_ENDIAN~LITTLE 
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* Define endian for target archive as generated by EmWeb/Compiler 
•/ 

^define EMWEB_ARCHIVE_ENDIAN E MWE B_E ND I AN_B I G 
/• 

* COMPILER COMPATIBILITY 
* 

* BEGIN_DECLS precedes external definitions, END_DECLS follows external 

* definitions. These could be defined as 'extern "C" {' and '} § respectively 
s * for GNU C++ compilers, for example. 

•/ 

tfifdef cplusplus 

^define BEGIN_DECLS extern "C" { 

^define ENDJDECLS } 

tfelse /* cplusplus */ 

#define BEGIN_DECLS 

^define END_DECLS 

flendif h cplusplus •/ 

h 

* PROTOTYPES 
•/ 

BEGIN_DECLS 

END DECLS 



flendif /* _EW_TYPES_H */ 



A-1.2. src/config/ew_config.h 

This file must be modified by the system integrator to taylor EmWeb/Server to the target 
environment. 



ev_config.h,v 1.77.2.3 1997/06/15 19:22:31 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 



Copyiight (C) 1996, 1997 Agianat Systems, Inc. 
All Rights Reserved 

Agianat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 



(617) 893-7868 

salesGagrana t . com , suppor t@agr ana t . com 
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* http://www.agranat.com/ 

* EmWeb common configuration 
* 

•/ 

Sifndef _EW_CONFIG_H 
#def ine _EW_CONFIG~H 

/* 

* Types for sized integers: INT8 INT16 INT32 P_INT 

* These are guesses as to the correct types to produce the 

* required sizes for your system. 

* The configure script will attempt to set these correctly 

* for the compiler platform; you should set when you copy this 

* file for each target. 
•/ 

#ifndef INT8 

# define INT8 signed char 
#endif 

#ifndef INT16 

# define INT16 short int 
#endif 

#ifndef INT32 

# define INT32 int 
#endif 

#ifndef P_INT /" an integer the same size as a pointer */ 

# define PJENT int 
#endif 

^include u ew_types .h" 
/* 

* INCLUDES 

* Any system includes needed by application environment go here 
*/ 

extern void application_tick () ; 
#include <stdio.h> 
#include <stdlib.h> 
#include <sys/types .h> 
#include <netinet/in.h> 
^include <signal.h> 

/• 

* HTTP PROTOCOL VERSION 
*/ 

# define HTTP_1_0 1000 /* DO NOT MODIFY */ 

# define HTTP_1~1 1001 /• DO NOT MODIFY •/ 
/• 

* Select desired conformance level 
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^define EW_CONFIG_HTTP_PROTOCOL HTTP_1_1 
/* 

* PROTOCOL OPTIONS {>« HTTP/1.0) 

* (R) Required, but some embedded systems don't have time-of-day 

* (0) Optional, but strongly recommended 

#define EW_CONFIG_OPTION_DAT£ /* (R) Generate Date: */ 

#define EW_CONFIG_OPTION_EXPIRE /* (o) Generate Expire: */ 

^define EW~CONFIG_OPTION_LAST_MODIFIED /* (O) Generate Last -modified : */ 

^define EW_CONFIG~OPTION_CONDITIONAL_GET/* (0) Parse If -Modified -Since : */ 

fldefine EW_CONFIGJDPTION_PRAGMA_NOCACHE /* (O) Generate Pragma: no- cache */ 



PROTOCOL OPTIONS (>« HTTP/1.1) 

(0) Optional, but strongly recommended 
(*) May be used with HTTP/1.0 



^define EW_CONFIGJDPTIONJPERSISTENT h 
^define EW_CONFIG~OPTION_CHUNKED_OUT< /• 
^define EW~CONFIG~OPTI0N_CHUNKED_IN /* 
^define EW~C0NFIG_OPTI0N_METHOD_OPTIONS /* 
^define EW^CONFI G~OPTI ON~METHOD~TRXCE /* 
flundef EW_CONFIG_OPTION_METHOD_PUT /* 
#undef EW~CONFIg2oPTION~METHODJD£LETE /* 
^define EW CONFIG OPTION CACHE~C0OTR0L /* 



(0*) persistent connections */ 
(0) respond with chunked encoding */ 
(0) parse chunked encoding »/ 
(0*) support OPTIONS method •/ 
(0*) support TRACE method •/ 
(•) support PUT operations */ 
(*) support DELETE operations */ 
(0«) Generate Cache ■ Control : */ 



CONFIGURATION OPTIONS 



The EmWeb/Server may be customized by the application developer to balance 
between functionality v.s. memory and CPU requirements. Each of the options 
below may be selected Udef ine) or unselected Uundef ) . 



•/ 

tfdefine EW_CONFIG_OPTION_STRING 
#de f i ne EufcON FI GJDPTI 0N_S TRINGJTYPED 
#define EW_C0NFIG~OPTI0N_INCLUDE 
^define EW^CONFIG^OPTION^FORM 
#define EW_CONFIGJOPTION~IMAGEMAP 
#define EW_CONFIG_OPTION_CGI 
^define EW~CONFI GJDPTI 0N_LINK 
^define EW~C0NFIG_OPTI0N_CL0NING 
^define EW~C0NFIG~OPTIONJDEMAND_L0ADING 
^define EW CONFIG~OPTION DOCUMENT DATA 



/* emweb_string support */ 
/* typed emweb_string support */ 
/* emweb_include support •/ 
/* form support */ 
/* support for imagemaps */ 
/* raw CGI support */ 
/* link node support */ 
/• URL cloning support */ 
/* demand document loading support */ 
/• direct archive data access support 1 



/ 

fldefine EW_CONFIG^OPTION_DOCUMENT_SET_REALM /* run-time realm assignment sup. */ 



^define EW_CONFIG_OPTION_CLEANUP 
^define EW_C0NFIG~OPTION_SCHED 
#define EW~CONFI GJDPTI ON~SCHED_SUSP_RES 
#define E W JTONFI G ~OPTI ON~S CH ED_FC 
ttdefine EW~C0NFI GJDPTI ON JJRL_H00K 
tfdefine EW~CONFIG~OPTION~AUTH 
tfdefine EW~CONFIG~OPTION_AUTH_BASIC 
fldefine EW_CONFIG~OPTION~AUTHJDIGEST 
lldefine EW CONFIG OPTION AUTH DIGEST M 



/* graceful cleanup support •/ 

/* request scheduling support */ 

/* suspend/resume request support */ 

/* flow control support •/ 

/* request URL rewriting hook */ 

/* authorization support •/ 

/* basic authorization support */ 

/* digest authorization support */ 
/• verify client message digest */ 
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#define EW_CONFIG_OPTION_AUTH_MBASIC /* "manual" basic authentication •/ 
#define EW_CONFIG_OPTION_AOTH_MBASIC_DECODE /* do base64 decode for MBASIC */ 
#define EWj:ONFIGJDPTION_AUTH_MDIGEST /* "manual" digest authentication */ 
#define EW_CONFIG_OPTI0N_AUTH_VERIFY /* manual verification of client */ 
#define EW_CONFIG_OPTION_COMPRESS /* archive decompression support */ 

^define EW~GONFIG_OPTION_RELEASE_UNUSED /*' Early release of unused buffers */ 
#define EW_CONFIG_OPTI0N_FILE /* local filesystem support */ 

#define EW_CONFIG~OPTION_FILE_GET /* local filesystem GET method ♦/ 

#define EW_CONFIG_OPTION_FILE_DELETE /* local filesystem DELETE method •/ 
#define EW_CONFIG_OPTION_FILE_PUT /* local filesystem PUT method •/ 

/* 

* Options to include support for retrieving HTTP request headers 
*/ 

#define EW_CONFIG_OPTION_CONTEXT_DATE 
# de f i ne EW_CONFI G_0 PTI ON~CONTEXT_PRAGMA 
#de f i ne EW_CONFI G_0 PTI 0N_CONTEXT_FR0M 

#define ew_config_option3context_if_modified_since 

#define £W_CONFIG_0PTI0N_CONTEXT_REFERER 
#de f i ne EW~CONFI G_OPTI ON_CONTEXT_US ER^AGENT 

#define ew_config~option~context_host~ 

/• 

* Option for serving document to browser in response to form 01 CGI 
•/ 

#de f i ne EWJTONFI G_OPTI ON_CONTEXT_S END_RE PL Y 
/* 

* Options to include support for CGI access functions 
*/ 

^define EW_CONFIG_OPTION_CGI_SERVER_SOFTWARE 

^define EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE 

#define EW~CONFIG_OPTION_CGI_SERVER_PROTOCOL 

^define EW~CONFIGJ)PTION~CGI~REQUESTJlETHOD 

8de f i ne EW_C0NFI GJDPTI ON ~CGI~PATH_INFO 

#de f i n e EW~CONFI G~0PTI ON JTGI_S CRI PT_NAME 

tfdef i ne EWJTONFI GJDPTI ON~CGI_QUERY_STRING 

ttdef ine EW_CONFIG JDPTION_CGI_CONTENT_TYPE 

#define EW_CONFIGJDPTION~CGI_CONTENT_LENGTH 

Udefine EWj:ONFIGJ)PTION~CGI_CONTENT_ENCODING 

/• 

* Options to handle certain form field types (EW_config_OPTION_FORM must be 

* defined for these to take effect) . 
*/ 

#define EW_CONFIG_OPTION_FIELDTYPE_RADIO 
ttdefine EW~CONFIG_OPTION~FI ELDTYPE_S ELECT_S INGLE 
#define EW_CONFIG_OPTION^FIELDTYPE_SELECT_MULTIPLE 
#define EWJTON Fl G~0 PTI ON~FI E LDTY PE_CH EC KB OX 
^define EvTcONFIG_OPTION_FIELDTYPE~TEXT 
ftdefine EW^CONFIG^OPTION^FIELDTYPE^IMAGE 

^define ew~configjdption~fieix>typejdecimaljjint 
#define ewj:onfigj)ption~fieudtype_decimal~int 

ttdefine EW CONFIGJ)PTION_FIELDTYPE_HEX_INT 
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^define EWJttNFIG_OPTION_FIELDTYPE_HEX_STRING 
^define EW CONFI G_OPTI ON~FI E LDTYPE_DOTTEDI P 
^define EW~CONFIG_0PTI0N_FIEU)TYP£_DECNET_IV 
#define EW~CONFIG_OPTION_FIELDTYPE_IEEE_MAC 
^define Ew""cONFIG_OPTION_FIELDTYPE__FDDI_MAC 
tfdefine EW~CONFIG_OPTION_FIELDTYPE_STD_MAC 
^define EW~CONFIG_OPTION_FIELDTYPE_OID 
# de f i ne E W~CONFI G_OPTI ON_FI ELDT YPEJFI LE 



* Force use of the buffer early release option if support for 

* file input field * needed so we don't buffer the entire 

* incoming file. 
•/ 

# i f de f EW_CONFI G_OPTI ON_FI£ LDTYPE_FILE 
# i f nde f EW_CONFI G_OPTI ON_RELEASE_UNUSED 
#define EW_CONFIG_OPTION_RELEASE_UNUSED 
flendif /* EW_CONFIG_OPTIONJRELEASE_UNUSED */ 
tfendif /* EW_CONFIG3oPTION~FIELDTYPE_FILE */ ' 

/• 

* Options to handle non- conformant browsers 
* 

* BROKEN IMS_EXTRA_DATA * Several recent versions of Netscape incorrectly 

* add extra information at the end of an If -Modif ied-Since: header in the 

* form (size ■ n) " . This is in violation of the HTTP specification and 

* causes EmVJeb/Server to effectively ignore the header. Since so many 

* browsers exhibit this behaviour, this work-around is provided to ignore 

* extra characters after the date string. 
•/ 

tf d e f i ne E W_CON FI G_OPTI ON_BROKE N_I MS_EXTRA_DATA 
* 

* BROKEN_NEED_OPAQUE - NCSA_Mosaic/2 .7b5 and Spyglass_Mosaic/2 . 11 

* incorrectly require the server to generate an opaque parameter 

* in www -Authenticate: headers using Digest authentication. 

•/ 

ft def i ne EW _CONFI G_OPTI ON_BROKEN_NEED_OPAQUE 
/• 

* SANITY CHECKING 
* 

* Define EMWEB SANITY to include extra sanity checking code during initial 

* integration fend debugging. Code size may be reduced by not defining this. 

#define EMWEB_SANITY 
/• 

* PORT- SPECIFIC DEFINITIONS 
•/ 

#define ewaAlloc malloc 
#define.ewaFree free 
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/• 

* TRACING AND LOGGING 
* 

* The following macros provide tracing and logging facilities using ANSI 

* printfO style arguments. 
*/ 

^define EMWEB_ERROR(x) printf x 
tfdefine EMWEB^WARN (x) printf x 
^define EMWEBJTRACE(x) /*printf x*/ 

tfdefine EWA_LOG_HOOK /* define to include ewaLogHookO interface */ 
NETWORK BUFFERS 

The network buffer structure is defined by the application and used 
by the EmWeb/Server . A network buffer could be an index into an array, 
a pointer to a buffer descriptor, etc. EmWeb/Server imposes only the 
following requirements on the application's buffer implementation: 

o Given a buffer, a pointer to the scart of data may be determined, 

o Given a buffer, the number of bytes of data may be determined or 

specified. The EmWeb/Server will never attempt to increase the 
size of a buffer . 

o Given a buffer, the next buffer on a singly linked list may be 
determined or specified. 

The EwaNetBuffer structure is used by EmWeb/Server to represents a buffer 
descriptor. The value EWA_NET_BUFFER_NULL indicates a NULL buffer used to 
terminate a buffer chain or as a return value from EwaNetBuffer Alloc { ) 
indicating no buffers available. 

/ 

typedef struct EwaNetBuf f er_s 
I 

struct EwaNetBuffer_s * next; 

uint8 * realdata; 

uinte * data; 

uintf length; 
} EwaNetBuf fei_t, * EwaNetBuffer; 

tfdefine EWA_NET_BUFFER_NULL ((EwaNetBuffer) NULL) 

/* Buffer primitives - these may be macros or subroutines */ 

#define ewaNetBuf f erLengthGet (buffer) (buffer) •> length 

#define ewaNetBuf ferLengthSet (buff er , len) (buf f er ) - >length = len 

#define ewaNetBuf ferDataGet (buf fer) (buffer) ->data 

#define ewaNetBuf ferDataSet (buf fer , datap) (buf f er ) - >data = datap 

#define ewaNetBuf ferNextGet (buf fer ) (buffer) ->next 

^define ewaNetBuf ferNextSet (buf fer , nxt) (buf f er ) - >next = nxt 

/• 

* Application- specific Network handle 
*/ 

typedef struct EwaNetHandle_s EwaNetHandle_t, -EwaNetHandle; 
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^define EWA_NET_HANDLE_NULL ( (EwaNetHandle) NULL) 

/• 

* Application- specific network handle cleanup function (01 macro) 

* invoked by EmWeb/Seivei after each processing each HTTP request 

* before invoking ewaNetHTTPEnd () . 
*/ 

tfifndef EW_CONFIG_OPTION_FILE_GET 

fldefine ewaNetHTTPCleanup{ handle ) /* no cleanup necessary */ 
flendif 



WO 98/06033 
EmWeb™ Functional Specification 



h 

* Application -specific Document handle 
•/ 

typedef void * EwaDocumentHandle; 

^define EWA_DOCUMENT_HANDLE_NULL ((EvaDocumentHandle) NULL) 

flifdef EW_CONFIGjDPTION_AUTH 

* AUTHORIZATION 
* 

* The application may attach an application-specific handle to an entry 

* in the authentication database. .The C-type for this handle is defined 

* by the application belov. 
•/ 

typedef void * EwaAuthHandie; /■ user handle to ID entry */ 

^define EWA_AUTHJiANDLE_NULL {(EwaAuthHandie) NULL) 

Jtifdef EW_CONFIG_OPTION_AUTH_DIGEST 
/* 

* Application -specific nonce parameters • these are used for Digest 
♦authentication to generate one-time challenges. Recommended values 

* include the client's IP address (derived from the network handle), 

* a time -stamp, a server -side secret value, and other random bits and 

* pieces. The EmWeb/Server generates an MD5 hash on these values (hiding 

* their semantics) to create the nonce value sent as challenges. 
•/ 

typedef struct EwaAuthNonce_s 
{ 

uint32 client_ip; 
uint32 times tamp; 

uint32 up_counter; 
# define EWA_AUTH_SECRET_SIZE 8 

Char secret IEWA_AUTH_SECRET_SIZE] ; 

} EwaAuthNonce; 

#endif /* EW_CONFIG_OPTION_AUTH_DIGEST •/ 

#endif /• EW_CONFIG_OPTION_AUTH */ 

/• 

* RAW CGI INTERFACE 
•* 

* The application may attach an application- specif ic handle to a raw CGI 
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* request. The C-type for this handle is defined by the application below. 
*/ 

typedef void * EwaCGIHandle; 

#define EWA_CGI_HANDLE_NULL ((EwaCGIHandle) NULL) 



* LOCKING 
* 

* The following macros must be defined to disable and enable task" preemption 

* to protect critical regions if more than one pre-emptive task may access 

* EmWeb/Server API functions at the same time. 

#define EWA_TASK_LOCK<) 
#define EWA_TASK_UNLOCK() 

/* 

* GLOBAL STATE 
•/ 

typedef struct EwsState_s *EwsStateP; 
/* 

* The ews state is a pointer to global state information used internally 

* by EmWeb/Server . In some environements, it may be desirable to maintain 

* multiple threads of EmWeb/Server 'within a single memory. To support this 

* functionality, ews_state may be overridden by a macro that expands at 

* run- time to different values. The only requirement is that the macro 

* returns type (EwsStateP) , and that the address of the pointer Uews_state) 

* can be determined. For example: 
* 

* ftdefine ews_state (* ( (EwsSCateP*) someFunccion(someArgument) ) ) 
•/ 

/• 

* LIBRARIES 

* 

* The EmWeb/Server implementation uses the following standard C library 

* functions: 
* 

* sprintf - for converting decimal integers to strings, needed to 

* generate Content -Length: HTTP headers. 
* 

* strcpy - for copying null - terminated strings between the application 

* and the EmWeb/Server (usually URL names) . 
* 

* strcmp - for comparing null- terminated strings (comparing URL names). 
* 

* strlen - get size of string 
* 

* Most embedded environments have these functions available in libraries. 

* However, EmWeb/Server can be configured to provide its own internal 

* implementations for this purpose, (Note that a general sprintf 

* implementation is not provided. Instead, only a conversion routine from 

* long integers to strings is needed. 
* 

* The following macros should be defined Udefine) if the corresponding 
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* function is provided by the application environment. 
*/ 

#undef EhftfEB_HAVE_SPRINTF 
#undef EMWEBJiAVrTsTRCPY 
flundef EMWEB^HAVE^STRCMP 
#undef EMWEB~HAVE_STRLEN 
#undef EMWEB_HAVE_MEMCPY 
flundef EMWEB_HAVE_MEMSET 
flundef EMWEB_HAVE_STRCHR 

/* If you have 'index' but not 'strchr', define EMWEB_HAVE_STRCHR and 

* #define EMWEB_5TRCHR ( s , c ) index(s,c) 

* / 



tfifdef EW CONFIG OPTIONJPILE 
/* 

* SERVER FILE SUPPORT 
* 

* For support of a server side file system. 
•/ 

typedef struct EwaFi leHandle_s *EwaFileHandle; 
#define EWA_FILE_HANDLE_NULL { (EwaFileHandle) NULL) 

#if defined ( EW_CONFIG_OPTI0N_FILE_GET ) \ 
II defined ( EW_CONFIG_OPTIONJ^ILE_PUT ) \ 
|| defined ( EW_CONFIG~OPTION_FILE_DELET£ ) 

typedef void *EwaFileName; /• unused for now */ 

#endif /« EW CONFIG_OPTIOJJ_FILE_xxx •/ 

ftendif /• EW~CONFIG_OPTION_FILE •/ 

#endif /* EW CONFIG_H */ 



A-2. Common Header Files 

The header files provided here may be included by application software and define the 
application interfaces to the EmWeb/Server. 

A-2.1. src/include/ews_api.h 

This is a master include file for EmWeb/Server which, in turn, includes all other 
application interface header files. We recommend that applications include this file for 
ease of integration with future releases. 

/• 

* ews_api.h,v 1.12 1997/05/21 21:55:43 ran Exp 
* 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS. INC. 
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* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 
* 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 
* 

* Agranat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 
* 

* (617) 893-7868 

* saleseagranat.com, support@agranat.com 
* 

* http://wwv.agranat.com/ 
* 

* EmWeb/Server Application Interface 
* 



#ifndef _ 


EWS_API_H 






#define " 


"ews_api_h 






#include 


M ew_types .h" 


/• 


application-defined generic types 


#include 


" ew_conf ig.h M 


h 


application -defined configuration 


#include 


u ews_def .h" 


h 


general interface definitions */ 


#include 


"ews_sys .h H 


h 


system interfaces */ 


^include 


u ews_net .h" 


1* 


network interfaces */ 


^include 


"ews_doc .h" 


1* 


document interfaces */ 


^include 


"ews_auth. h" 


h 


authentication interfaces */ 


^include 


"ews_cgi .h" 


/* 


CGI interfaces •/ 


^include 


"ews^ctxt.h" 


1* 


context access interfaces •/ 


Kendif /* 


_EWS_API_H */ 







PCT/US97/13817 



src/indude/ews_def.h 



A-2.2. src/include/ews_def.h 

This file contains general definitions used throughout the EmWeb/Server application 
interface. 

/* 

* ews_def.h,v 1.26 1997/05/25 23:30:32 giusti Exp 
* 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 
* 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 
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« Agranat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 
* 

* (617) 893-7868 

* sales©agr anat.com, support®agranat . com 
* 

* http://www.agianat.com/ 

* EmWeb/Seivex public definitions 
* 

*/ 

flifndef _EWS_DEF_H 
ttdefine JSWS_DEF_H 

typedef const char *EwsConstCharP; 

h 

* Status codes returned to the application by EmWeb/Server 
*/ 

typedef enum EvsStatus_e 
i 

EWS_STATUS_OK, 
EWS_STATUS JBAD_MAGI C , 
* EWS_STATUS_BAD_VERSION, 
EWS_STATUS_ALREADY_EXISTS , 
EW5_STATUS_N0_RES0URCES , 
EWS_STATUS_IN_USE ( 

ews~status~not_registered , 
ews_status_not_cloned , 
ews"status"not"found , 
ews~status_auth_fai led f 
ews~s t atu s_b ad_s tate , 
ews_status_bad_realm , 

EWS~STATUS JPATAL_ERROR , 
EWS_STATUS~ABORTED 
} EwsStatus; 

/* 

* Status codes returned to EmWeb/Server by the application 
*/ 

typedef enum EwaStatus_e 
[ 

EWA_STATUS_OK, 

# ifdef EW_CONFiG_OPTION_SCHED 
EWA_STATUS_OK_YIELD , 

# endif 

EWA_STATUS_£RROR 
) EwaStatus; 

/* 
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* EmWeb/Servei request context handle 
•/ 

typedef struct EwsContext_s * EwsContext; 

#def ine EWS_CONTEXT_NULL ( (EwsContext) NULL) 

tfifdef EWA_LOG_HOOK 

/. 

* Status codes used for logging requests 
•/ 

typedef enum EwsLogSta tus_e 
{ 

/• 

* 200 Request accepted 
V 

EWS LOG STATUS OK, 



* Request dispositions (aftei successful request) 



EWS_LOG_STATUS_NO_CONTENT , 
EWS_LOG~STATUS_MOVED_PERMANENTLY , 
EWS_LOG_STATUS_MOVEDJTEMPORARILY, 
EWS_LOG_STATUS_SEE_OTHER , 
EWS LOG STATUS~NOT MODIFIED, 



h 



204 no-op form or imagemap */ 

301 link */ 

302 redirect */ 

303 see other */ 

304 not modified since */ 



* 4 01 Unauthorized 
•/ 

EWS_LOG_STATUS_AUTH_FAILED , 
EWS_LOG_STATUS_AUTH_FORGERY , 
EWS_LOG_STATUS~AUTH_STALE , 
EWS_LOG_STATUS~AUTH_REQUIRED , 
EWS LOG STATUS AUTH DIGEST REQUIRED, 



/* authorization failed •/ 
/* bad message checksum */ 
/* authorization nonce stale */ 
/* authorization not present */ 
/* message digest not present */ 



* 400 Bad Request 
*/ 

EWS_LOG_STATUS_BAD_REQUEST , 
EWS_LOG_STATUS_BAD~FORM , 
EWS~LOG~STATUS BAD~"lMAGEMAP , 



/* HTTP parse error */ 
/* form data parse error */ 
/* imagemap query parse error */ 



* Additional errors 



ews_log_status_not_found , 
ews_log_statusj4ethod_not_allowed , 
ews_log_.status_length_required , 
ews~log_status_unavailable , 
ews_log~status~not_implemented , 
ews_log~status_no_resources , 
ews~log status internal_error 



h 4 04 not found or hidden */ 
/* 405 method not allowed •/ 
/* 411 length required */ 

/* 503 aborted Document Fault 1 
/* 501 bad method for URL •/ 

/* 500 insufficient resources ' 
/• 500 internal error */ 



} EwsLogSta tus; 
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* ewaLogHook 

* Applicacion logging hook 
« 

* context - context of request being logged 

* status - logging status 
•/ 

flifndef ewaLogHook 

extern void ewaLogHook (EwsContext context, EwsLogStatus status); 
tfendif /* ewaLogHook */ 

#else /* EWA_LOG_HOOK */ 

#define ewaLogHook (context, status) 

#endif /* EWA_LOG_HOOK */ 

/* 

* EmWeb/Server archive descriptor. 
•/ 

typedef struct EwsArchive_s * EwsAr chive; 
/• 

* EmWeb/Server document handle 
•/ 

typedef struct EwsDocument_s * EwsDocument; 

^define EWS_DOCUMENT_NULL {(EwsDocument) NULL) 

/• 

* EmWeb/Servei opaque read-only data handle 
•/ 

typedef const uint8 EwsArchiveData [] ; 
/• . 

* EmWeb/Server authorization handle 
•/ 

typedef struct EwsAuthHandle_s * EwsAuthHandle; 
fldefine EWS_AUTH_HANDLE_NULL ((EwsAuthHandle) NULL) 

flifdef EW_CONFIG_OPTION_FORM 

* Application form interface constants for status byte 
*/ 

ftdefine EW_FORM_INITIALIZED 0x01 
ttdefine EW~FORM~DYNAMIC 0x02 
ftdefine EW~FORM_RETURNED 0x10 
^define EW_FORM~PARSE_ERROR 0x20 

tfdefine EW_FORM_FILE_ERROR 0x20 /* equivalent to parse error */ 

/• 

* EmWeb/Server form element types 
•/ 

#i f def EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING 
typedef struct EwsFormFieldHexString_s 



uint32 length; 
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uint8 »datap; 
} EvsFormFieldHexString, *EvsFormFieldHexStringP; 
ftendif /• EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING •/ 

ftif (defined (EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC) \ 
| j def inedTEW_CONFIG_OPTION_FIELDTYPE_FDDI_MAC> \ 
j| defined (EW_CONFIG_OPTION_FIELDTYPE_STD_MAC) \ 
) 

cypedef uint8 EvsFormFieldMAC (6] ; 
ftendif /• MAC */ 

ftifdef EW_CONFIG_OPTION_FIELDTYPE_OID 
cypedef struct EwsFormFieldObjectID_s 
{ 

uint32 length; /* number of uint32's in datap */ 

uint32 *datap; /* array of uint32's representing OID */ 

} EvsFormFieldObjectID, *EvsFormFieldObjectIDP; 
ftendif /• EW_CONFIG_OPTION_FIELDTYPE_OID */ 

#if defined (EW_CONFIG_OPTION_FIELDTYPE_RADIO) || \ 
defined (EWJTONFIGJ)PTIONJFIELDTYPE_SELECrr_SINGLE) 

h 

■ * ewsFormEnumToString 

* Lookup string corresponding to enum from context 
* 

* context • context of request 

* enum • value of enumerator 
* 

* Returns string from corresponding HTML VALUE* field, or NULL if out of 

* bounds. 
•/ 

extern const char * ewsFormEnumToString { EwsContexc context, int value >; 
#endif /* EW_CONFIG_OPTION_FIELDTYP£_RADIO 1 SELECT_SINGLE •/ 

#endif /* EW_CONFIG_OPTION_FORM •/ 



* EwsRequestMethod 
* 

* This is an enum for supported request methods. Bit values are used so 

* groups of valid request methods can be grouped into a single field 
•/ 

typedef enum EvsRequestMethod_e 
{ 

ewsRequestMeChodUnknown « 0x0000 /* all others */ 
,evsRequestMethodGet ■ 0x0001 /* GET •/ 

,evsRequestMethodPost - 0x0002 /* POST •/ 
.evsRequestMethodHead ■ 0x0004 /* HEAD •/ 

ft ifdef EW_CONFIG_OPTION_METHOD_OPTIONS 

.evsRequestMethodOptions ■ 0x0008 /* OPTIONS */ 
ft endif 

ft ifdef EW_CONFIG_OPTION_METHOD_TRACE 

.evsRequestMethodTrace - 0x0010 h TRACE •/ 
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3 endif 

# ifdef EW_CONFIG_OPTION_METHOD_PUT 
,ewsRequestMethodPut - 0x0020 /• PUT •/ 

3 endif 

# ifdef EW_CONFIG_OPTION_METHODJDELETE 
,ewsRequestMethodDelete * 0x0040 /* DELETE •/ 

# endif 

} EwsRequestMethod; 



flendif /* _EWS_DEFH V 



/ 



A-2.3. src/include/ews_sys.h 

This file contains definitions and prototypes of the system functions of the application 
interface. 

ews_sys.h,v 2.17.2.3 1997/06/02 23:46:39 giusti Exp 

Product : EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY .INFORMATION OF AGRANAT SYSTEMS , INC . 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

sales©agranat .com, support®a gianat.com 
ht tp : / /www . agr ana t . com/ 
EmWeb/Servei system interfaces 



tfifndef _EWS_SYS_H 
^define _EWS_SYS_H 

ft include "ew^types.h" 
ftinclude M ew_conf ig .h" 
ftinclude "ews_def.h M 
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........... 

* INITIALIZATION AND SHUTDOWN 
* 

* The EmWeb/Server must be initialized at start-up before accepting requests, 

* installing document archives, or registering authentication information. 

*** **** * •« •••*•/ 

/* 

* ewslnit 

* Initialize EmWeb/Server 
* 

* Returns EWS STATUS OK on success, else failure code (TBD) . 

extern EwsStatus ewslnit ( void ) ; 

ftifdef EW_CONFIG_OPTION_CLEANUP 
/* 

* ewsShutdown 

* Graceful shutdown of EmWeb/Server terminating all requests in progress 

* and releasing all memory and buffers. 
» 

* Returns EWS_STATUS_OK on success, else failure code (TBD) . 
•/ 

extern EwsStatus ewsShutdown { void ); 
#endif /• EW_CONFIG_OPTION_CLEANUP •/ 

ttifdef EW_CONFIG_OPTION_SCHED 

/*•••*•* *** ****** * 

* SCHEDULING 
* 

* The EmWeb/Server is capable of both multi - threading HTTP requests and 

* yielding execution control to the CPU. The following functions are provided 

* to give the application control over how EmWeb/Server schedules pending 

* requests. 
* 

* **** *** / 

/* 

* ewsRun 

* Reschedule request processing after control returned to application as a 

* result of returning EWA_STATUS_OKJfIELD from ewaNetHTTPSendO , 

* evaNetHTTPEndO , or ewaDocumentFault () , or as the value to the status 

* parameter in ewsResumeO . 
* 

* Returns EWS_STATUS_OK on success, else failure code (TBD). 
extern Ewsscacus ewsRun ( void ) ; 

(fifdef EW_CONFIG_OPTION_SCHED_SUSP_RES 
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* ewsSuspend 

* Suspend processing of the cunent request during an EmWeb callout function 

* (e.g. EmWebString, EmWebFormServe, or EmWebFormSubmit) . This function is 

* used in the implementation of proxies. 
* 

* Note that this does _not_ cause the server to stop processing requests; in 

* fact, it forces a flush of any partially filled buffer for the current 

* request and may process other pending requests. This just causes the 

* current callout to be marked as 'suspended' . When the current callout 

* returns, the result will be ignored * after ewsResume (below) is called 

* for this same context, the callout will be repeated. 
•* 

* context * context of request to be suspended 
* 

* Returns EWS_STATUS OK on success, else failure code (TBD) . 
extern EwsStatus ewsSuspend ( EwsContext context ) ; 

/* 

* ewsResume 

* Resume processing of a request previously suspended by ewsSuspend 0 . This 

* causes the request to be rescheduled, and the callout from which ewsSuspend 

* had been called will be reinvoked. 
* 

* context • context of suspended request to be resumed 

* Status - EWA_STATUS_OK or EWA_STATUS_OK_YIELD . 
* 

* Returns EWS STATUS_OK on success, else failure code (TBD) . 
*/ 

EwsStatus ewsResume ( EwsContext context, Ewastatus status ) ; 
Sendif /* EW_CONFIG_OPTION_SCHED_SUSP_RES *l 

ftendif /* EW_CONFIG_OPTION_SCHED */ 

/" — * — — — - ........ 

* MEMORY MANAGEMENT 

* The EmWeb/Servei presumes that the target O/S has a dynamic memory 

* management capability roughly equivalent to the POSIX mallocO and freeO 

* functions. 
* 

* Alternatively, the application could create a static linked- list of memory 

* blocks of different sizes. Refer to the product documentation for 

* information about run- time memory requirements. 

* The application is responsible for providing the following memory management 

* functions to the EmWeb/Server . 
* 

— * •••••/ 

tfifndef ewaAlloc 
/* 

* ewaAlloc 
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* Allocate a block of memory of ac lease Che requested number of bytes. 
* 

* bytes • requested size of the memory block in bytes 
* 

* Returns a pointer to the first byte of memory, or NULL if no memory of the 

* requested size is available. 

extern void * ewaAlloc ( uintf bytes ); 
#endif 

tfifndef ewaFree 
/• 

* ewaFree 

* Free a block of memory previously allocated by ewaAlloc () 
* 

* pointer - pointer to beginning of memory block (from ewaAlloc ()) 
* 

* No return value 
•/ 

extern void ewaFree ( void * pointer ) ; 
flendif 

# i f de f EW_CONFIG_OPTION_DATE 



* TIME -OF -DAY MANAGEMENT 
* 

* If DATE support is enabled, the EmWeb/Server invokes the following 

* application -provided function to retrieve the current date for use in 

* Date: HTTP headers. Furthermore, the current date is also used in 

* Expire: and Last -modified: headers of dynamically generated documents 

* (i.e. HTML documents containing EMWEB extensions), if configured. 

* Note that the Last -modified: header of static documents use the archive 

* creation date stored in the archive by the EmWeb/Compiler . 

* / 

#ifndef ewaDate 
/* 

* ewaDate 
* 

* Return a string containing the current time -of -day in one of the HTTP 

* standard representations as follows: 
* 

* RFC1123: ..(Preferred standard) 

* Fri, 28 Jun 1996 15:57:28 GMT 
* 

* RFC850: (Used, but not preferred) 

Friday, 28-Jun-96 15:57:28 GMT 

* asctime: (Allowed, but discouraged) 

Jun 6 15:57:28 1996 

•/ 
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extern const chai * evaDate { void ) ; 
flendif 

#endif /* EW_CONFIG_OPTION_DATE */ 
Sifdef EW_CONFIG_OPTION_URL_HOOK 

/ * 

* URL REWRITING 
. 

* If URL rewriting support is enabled, the EmWeb/Server will invoke the 

* following function when each request has been successfully parsed, but 

* before the URL is looked up in the filesystem. The application can then ' 

* return a new (or the same) URL to actually serve. 
* 

* / 

#ifndef ewaURLHook 
/* 

* ewaURLHook 

* context - context of request 

* url - requested URL 
. 

* Returns new URL, or NULL to cause abort. (For no-op, simply return url) . 
* 

* Note: the application MUST NOT invoke ewsNetHTTPAbor t from here! Return 

* a NULL pointer instead! 
. 

* The URL may be rewritten in place if the length is not increased; 

* if the returned pointer is not within the url parameter, the value is 
copied by the server . 

*/ 

extern char * ewaURLHook ( EwsContext context, char *url ); 
fcendif 

flendif /* EW_C0NFIG_0PTION_LOG_H0OK */ 
/* 

* Since content length of zero is valid, we cannot use zero to 

* indicate when the content length is unknown (eg. dynamic data). 

* Assuming nobody will ever try to send/receive a 4gig document is 

* probably safe for now... 
•/ 

# de f i ne EWS_CQNTEOT_LENGTH_UNKNOWN ( (int32) -1) 
#ifdef EW_CONFIG_OPTION FILE 

/ ..7..... 

* 

* LOCAL FILE SYSTEM SUPPORT 
* 

* The following routines must be supplied to support the server's 

* local file system. 
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*/ 

typedef union EwsFileParams_s 
{ 

/• 

* fileField - for support of the form INPUT TYPE "FILE field. 

* The server fills out this structure, and passes it to 

* the application when the file is submitted 
*/ 

# ifdef EW_CONFIG_OPTION_FIELDTYPE_FI LE 
struct 

{ 

const char *fileName; /* file name or NULL */ 

const char *contentType; /* MIME type */ 
const char *contentEncoding; /* content encoding or NULL */ 
const char *contentDisposi tion; /* Content-disposition: */ 
int32 contentLength; /* length or EWS_CONTENT_LENGTH_UNXNOWN */ 

} fileField; 

# endif /* EW CONFIG_0PTI0N_FIELDTYPE_FILE •/ 



* filelnfo • for support for local file operations (GET, HEAD, OPTIONS , 

* PUT, DELETE). This structure is setup by the application when a URL 
• * that corresponds to a local file is received. This structure 

* gives the server all it needs to know to handle the file operation. 
*/ 

# if defined ( EW_CONFIG_OPTION_FILE_GET ) \ 
|| defined ( EW_CONFIG_OPTION_FILE_PUT ) \ 
|| defined ( EW_CONFIG~0?TION_FILEJDELETE ) 
struct 

C 

EwaFileName fileName; /* file name (opaque) */ 

const char *contentType; /* MIME type */ 

const char *contentEncoding; /* content encoding or NULL */ 

const char *contentLanguage; /« content language or NULL */ 

const char *eTag; /* reserved, MUST BE NULL */ 

const char •lastModif ied; /* modification time (RFC1123) or NULL »/ 

const char *lastModif iedl036 ; /• modification time (RFC1036) or NULL */ 

const char 'realm; /* auth realm or NULL •/ 

int32 contentLength; /* length or EWS_CONTENT_LENGTH_UNKNOWN •/ 

EwsRequestMethod allow; /• reserved, MUST BE ewsRequestMethodGet */ 
/* HEAD Sl OPTION _always_ allowed by default •/ 

} filelnfo; 

# endif /• local file system GET /PUT /DELETE V 

char reservedl; /* prevent NULL union */ 

) EwsFileParams, *EwsFileParamsP; 



* ewaFileClose 
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* Closes the file and indicates success 01 failure 
*/ 

extern void 

ewaFileClose (EwaFileHandle handle. EwsStatus status ); 



* ewaFileWrite 

* Write data to a file 



extern sintf 

ewaFileWrite ( EwsContext context 

, EwaFileHandle handle /* handle from ewaFileOpen */ 
, const uint8 *datap /• pointer to data */ 

, uintf length /* length of data */ 

>; 

/• returns bytes written, <0 on error */ 



h 

* ewaFileRead 

* Read data from a file 
•/ 

extern sintf 

ewaFileRead ( EwsContext context 

, EwaFileHandle handle /* handle from ewaFileOpen •/ 
, uint8 *datap /* pointer to data buffer */ 

, uintf length /• length of buffer */ 

) ; 

/• returns bytes read, 0 on EOF, <0 on error •/ 

ftifdef EW_CONFIG_OPTION FIELDTYPE FILE 
/• 

* ewaFilePost 

* For multipart/form-data file submissions- Before the application's 

* submit function is called, the server may invoke this function for 

* each received file as part of a <INPUT TYPE°FILE> element in the 

* form. If successful, the file handle will be passed to the 

* application's submit function at which point it is the application's 

* responsibility to close the file. 
•/ 

extern EwaFileHandle 
ewaFilePost ( EwsContext context 

, const EwsFileParams *params 
); 

/• returns EWA_FI LE_HANDLE_NULL on error */ 
ftendif /* EW_CONFIG_OPTION_FIELDTYPE_FILE */ 

ftifdef EW_CONFIG_OPTION_FILE_GET 

* ewaFileGet 

* When the server determines that the file set by evsContextSetFile 

* should be served to the browser, this function is invoked to open 

* the file for reading. 
* 

* To support Conditional GET. the request message may include 
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* If -Modif ied-Since, If -Unmodified- Since. If*Match, 

* If -None-Match, or If -Range headers. In this case, the 

* server will use the information given in the returned 

* params block to determine if the file should be retrieved. 
•/ 

extern EwaFileHandle 
ewaFileGet ( EwsContext context 
, const char *url 

, const EwsFileParams *params /* from ewsContextSetFile ( ) */ 
) ; 

/* returns EWA_FILE_HANDLE_NULL on error */ 
#endif /* EW_CONFIG_OPTXONJFTLE_GET */ 

#endif /* EW_CONFIGJDPTION_FILE */ 

tfendif /* _EWS_SYS_H */ 



A-2A src/include/ews_net.h 

This file contains the definitions and prototypes used by the networking functions of the 
application interface. 

■/• 

* ews_net.h,v 1.20.2.1 1997/06/15 03:03:18 giusti Exp 
* 

* Product: EmWeb 

* Release: R2_l 
* 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 
* 

* Copyright (C) 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 
• 

* Agranat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 
* 

* (617) 893-7868 

* sales@agranat.com, support@agranat.com 
* 

* http://www.agranat.com/ 
* 

* EmWeb/Server application interface to network transport layer 

#ifndef _EWS_NET_H 
#def ine _EWS_NET_H 

#include "ew_types.h M 
^include M ew_conf ig .h" 
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^include M ews def.h" 



* In a typical TCP/IP implementation, the application is responsible for 

* listening to the HTTP TCP port (80) foi connection requests. When a 

* connection request is received, the application accepts the connection 

* on behalf of EmWeb/Server and invoke ewsNetHTTPStart () to inform the 

* EmWeb/Server of the new request. 

» EmWeb/Server assumes that the application maintains data buffers for 

* the reception and transmission of TCP data. The only requirements that 

> EmWeb/Server imposes on the buffer implementation is as follows: 

* 1. Buffers can be uniquely identified by a buffer descriptor. No 

> assumptions are made about the actual structure of the buffer 
descriptors or their relationship to data. For example, a buffer 
descriptor could be an index into a table, a pointer to a 
structure (either contiguous or sepera.te from the data represented) , 
etc. The application is responsible for defining the appropriate 
type for EwaNetBuffer and value for EWA_NET_BUFFER_NULL. 

2. Buffers can be chained together. Given a buffer descriptor, 
EmWeb/Server must be able to get or set the "next buffer in' the chain" 
field. This is done by ewaNet3uf f erNextSet ( ) and 

ewaNetBufferNextGetO . Note that the buffer chain is terminated when 
the next buffer value is EWA_NET_BUFFER_NULL . 

3. Given a buffer descriptor, EmWeb/Server can determine the start of 
data in the buffer. Additionally, EmWeb/Server may change the start 
of data in the buffer (EmWeb/Server only changes the start of data in 
the buffer upward). This is done by ewaNetBuf ferDataGet () and 
ewaNetBuf ferDataSetO . 

4. Given a buffer descriptor, EmWeb/Server can determine the size of 
contiguous data in the buffer. Additionally, EmWeb/Server may 
change the size of the buffer (EmWeb/Server only changes the 

size of the buffer downward). This is done by ewaNetBuf ferLengthGet () 
and ewaNetBuf f erLengthSet () . 

5. EmWeb/Server may allocate a buffer by invoking ewaNetBuf fer Alloc () . 

If no buffers are available, this function returns ewa NET BUFFER NULL. 
Additionally, EmWeb/Server may release a buffer by invoking 
ewaNe tBu f f er Fr ee ( ) . 

As the application receives TCP data on an HTTP connection, it passes 
this data to the EmWeb/Server by invoking ewsNetHTTPReceiveO . 

The EmWeb/Server transmits TCP data on an HTTP connection by invoking 
ewaNetHTTPSendC) . The application- may throttle EmWeb/Server by 
returning EWA_STATUS_OK_YIELD . This causes the EmWeb/Server to 
save state and return control to the application. The application must 
invoke ewsRunO to give the EmWeb/Server an opportunity to continue 
processing the request. 
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* When the EmWeb/Server completes a request, it invokes ewaNetHTTPEnd () . 
* 

* The application may abort a request at any time by invoking 

* ewsNetHTTPAbort (} . * 
* 

* 

/• 

* ewsNetHTTPStart 

. * Start a new HTTP request 
* 

* net_handle - application- specif ic handle representing request 
* 

* Returns context for the request, or EWS_CONTEXT_NULL on failure. 
*/ 

extern EwsContext ewsNetHTTPStart ( EwaNetHandle net_handle ) ; 
/• 

* ewsNetHTTPAbort 

* Abort a previously started HTTP request. 
* 

* context • context of request to be aborted 

* Returns EWS_STATUS OK on success, else error code (T3D) 
*/ 

extern EwsStatus ewsNetHTTPAbort ( EwsContext context ); 
/• 

* ewsNetHTTPReceive 

* Receive request data from the network. 
* 

* context • context of request to which received data applies 

* buffer - buffer containing received data 
* 

* Returns EWS STATUS OK on success, else error code (TBD) 

extern EwsStatus ewsNetHTTPReceive ( EwsContext context, EwaNetBuffer buffer ); 

Jfifdef EW_CONFIG_OPTION_SCHED_FC 

/* 

* ewsNetFlowControl 

* Mark context for flow control to avoid predicted congestion. ewsRunO will 

* place the context on the suspended list at the next opportunity and 

* continue by processing additional requests. 

* context - context of request to be flow controlled 
* 

* Returns EWS_STATUS OK. 

EwsStatus ewsNetFlowControl ( EwsContext context ) ; 
/* 
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* ewsNetUnFlowControl 

* Resume previously flow controlled context 



* context 



• context of request to be flow controlled 



* Returns EWS_STATUS_OK . 

EwsStatus ewsNetUnFlowcontrol ( EwsContext context ) ; 

#endif /• EW_CONFIGJDPTION_SCHED_FC */ 

tfifndef ewaNetHTTPSend 
/* 

* ewaNetHTTPSend (Application) 

* This function must be provided by the application to accept data from 

* EmWeb/Server for transmission to a browser in response to a request. 
* 

* net_handle - application- specif ic request handle from ewsNetHTTPStar t 0 

* buffer • buffer containing data to be transmitted 
* 

* Returns EWA_STATUS_OK on success, -EWA_STATUS_OK_YIELD on success and 

* request EmWeb/Server to yield CPU to application, or EWA_STATUS_ERROR on 

* failure. 
•/ . 

extern EwaStatus ewaNetHTTPSend 

{ EwaNetHandle netjiandle, EwaNetBuf fer buffer ) ; 
#endif 

flifndef ewaNetHTTPEnd 
/* 

* ewaNetHTTPEnd (Application) 

♦.This function must be provided by the application. It is invoked by 

* EmWeb/Server to indicate the completion of a request after all response 

* data has been sent. 



* net_handle - application -specific request handle from ewsNetHTTPStar t () 
* 

* Returns EWA_STATUS_OK on success, EWA_STATUS_OK_YIELD on success and request 

* EmWeb/Server to yield CPU to application, or E WA_S TATUS_£RROR on failure. 
•/ 

extern EwaStatus ewaNetHTTPEnd (EwaNetHandle net_handle ); 
#endif 

#ifndef ewaNetBuf f erAlloc 
/* 

* ewaNetBufferAlloc (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to request a network buffer to be used for sending data. 
* 

* Returns a buffer, or EWA_NET_BUFFER_NULL on failure. The length of the 

* buffer must be initialized to the number of bytes available for use 

* by EmWeb/Server . 
•/ 

extern EwaNetBuf fer ewaNetBufferAlloc ( void ) ; 
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#endif 



flifndef ewaNetBuf ferFiee 
/• 

* ewaNetBuf ferFiee (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/server to release one or a chain of network buffers (either from 

* ewsNetHTTPReceiveO or ewaNetBuf fer Alloc ()) . 



* No return value 

extern void ewaNetBuf ferFree ( EwaNetBuf fer buffer ) ; 
#endif 

#ifndef ewaNetBuf fer LengthGet 
/• 

* ewaNetBuf ferLengthGet (Application) 

* This function must be provided by. the application. It is invoked by 

* EmWeb/server to get the length of the data portion of this buffer fragment. 
* 

* buffer * buffer descriptor 
* 

* Returns length of buffer 
•/ 

uintf ewaNetBuf ferLengthGet ( EwaNetBuf fer buffer ) ; 
flendif 

ftifndef ewaNetBuf feiLengthSet 
/• 

* ewaNetBuf ferLengthSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the length of the data portion of this buffer fragment. 

* This function is only used to decrease the original length of a 

* buffer. EmWeb/server never increases the length of a buffer. 
* 

* buffer ■ buffer descriptor 

* length • new length value 
* 

* No return value 
*/ 

void ewaNetBuf ferLengthSet ( EwaNetBuf fer buffer, uintf length ); 
#endif 

tfifndef ewaNetBuf ferDataGet 
/* 

* ewaNetBuf ferDataGet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the pointer to the data contained in the buffer. 



* buffer 



buffer (s) to be released 



* buffer 



• buffer descriptor 



* Returns pointer to data in buffer 
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uint8 * evaNetBuf ferDataGet ( EvaNetBuffer buffer ); 
flendif 

ftifndef evaNetBuf feiDataSet 
/* 

* evaNetBuf ferDataSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the pointer to the data contained in the buffer. 

* This function is only used to advance the start of data forvard. 

* EmWeb/Server never moves this pointer backward. 
• 

* buffer - buffer descriptor 

* da tap - nev start of data value 
* 

* No return value 

void evaNetBuf fexDataSet ( EvaNetBuf fer buffer, uinc8 *datap ); 
#endif 

tfifndef evaNetBufferNextGet 
/* 

* evaNetBufferNextGet (Application! 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to get the next buffer descriptor in the buffer chain. 



* Returns next buffer descriptor, or EWA_NET_B T JFFER_NULL if end of chain. 

* / 

EvaNetBuf fer evaNetBufferNextGet { EvaNetBuf fei buffer ) ; 
flendif 

ffifndef evaNetBuf ferNextSet 

* evaNetBufferNextSet (Application) 

* This function must be provided by the application. It is invoked by 

* EmWeb/Server to set the next buffer descriptor in the buffer chain. 
* 

* buffer - buffer descriptor 

* next • nexc buffer descriptor to be attached to buffer 
* 

* No return value 
*/ 

void evaNetBuf feiNextSet ( EvaNetBuf fer buffer, EvaNetBuf fer next ); 
#endif 

tfifndef evaNetLocalHostName 
/* 

* evaNetLocalHostName (Application) 

* This function must be provided by the application. It is invoked by the 

* EmWeb/Server to build proper redirection (Location;) headers. This can 

* be either a dotted IP address or a fully qualified hostname. 
*/ 



* 



* buffer 



• buffer descriptor 
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const char * ewaNetLocalHostName ( EwsContext context ); 
#endif 

#ifndef ewaNetHTTPCleanup 

h 

* ewaNetHTTPCleanup 

* This function must be provided by the application or defined as a 

* empty macro. It is invoked by EmWeb/Server when a request completes, 

* allowing the application to reset any processing state stored in the 

* network handle. Note that for HTTP 1.1 persistent connections, this 

* routine may be called several times for the same connection, as one 

* connection can be used for multiple requests. For the last request 

* on a connection, this routine will be called before ewaNetHTTPEnd is 

* invoked. 
* 

* Returns void. Note that the request context is undefined during 

* this call and cannot be accessed. 
•/ 

void ewaNetHTTPCleanup ( EwaNetHandle handle ); 
#endif 

#endif /* _EWS_NET_H •/ 
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A-2.5. src/include/ews_doc.h 

This file contains the definitions and prototypes for the archive and document 
management functions of the application interface. 

ews_doc.h,v 1.20 1997/05/21 21:55:44 ian Exp 

Product: EmWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 

Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

salesQagrana t . com , suppor t@agrana t . com 
http : //www . agr ana t . com/ 

EmWeb/Server application interface to document archives 

/ 
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flifndef _EWS_DOC_H 
^define _EWS_DOC_H 

^include M ew_types.h" 
^include M ew_conf ig .h" 
^include "ews_def .h tt 



/••• — — + ***** 

* ARCHIVE MAINTENANCE 
* 

* The EmWeb/Compiler generates an archive of one or more documents. Documents 

* can be HTML files, JAVA programs, graphical images, or any other information 

* resource addressable by a URL. Archives may be independently loaded 01 

* unloaded into the EmWeb/Server . 
* 

* In most applications, the entire set of available documents would be 

* compiled into a single archive and loaded at boot time. However, some 

* applications may desire to dynamically load archives at run- time as needed 

* in order to reduce memory requirements. In fact, some applications may 

* want to implement a scheme similar to page swapping under some operating 

* systems to cache an active set of documents in memory while storing other 

* documents in a secondary storage area. Such a secondary storage area 

* could be in FLASH memory, or on a remote server using TFTP or other 

* protocols to load documents at run- time. 
* 

* An EmWeb archive consists of two components. First, there is the archive 

* data component containing the database of compressed documents, information 

* about how to construct dynamic documents at run -time, access controls, 

* etc. Second, there is the archive object component containing the run -time 

* object code used for the construction of dynamic documents, etc. 
« 

* Operating systems supporting the run* time loading and linking of object 

* code may offload both the data and object archive components to a secondary 

* storage area. Otherwise, only the data components would be offloaded 

* while the object components would be statically linked into the run -time 

* executable image. 
* 

* Each archive contains an archive descriptor in the object component. The 

* archive descriptor is referenced by a public symbol generated by the 

* EmWeb/Compiler . In order to activate an archive at run-time, the 

* application must invoke ewsDocumentlnstallArchive 0 with parameters 

* indicating the address of- the data component and the archive descriptor of 

* the object component. The archive may be deactivated by invoking 

* ewsDocumentRemoveArchiveO . 
• 

* * * * •••••/ 

/* 

* ewsDocumen tin stallAr chive 
* 

* Install a document archive generated by EmWeb/Compiler into EmWeb/Server 

* run -time database. 
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* descriptor - public symbol of archive object component descriptor 

* datap - pointer to archive data component 
* 

* Returns EWS_STATUS_OK on success, else erroi code (TBD) 
*/ 

extern EwsStatus ewsDocumentlnstallArchive 

( EwsArchive descriptor, EwsArcfiiveData datap ); 

tfifdef EW_CONFIG_OPTION_CLEANUP 
/* 

* ewsDocumentRemoveAr chive 
* 

* Removes previously installed document archive from run -time database. 

* descriptor - public symbol of archive object component descriptor 
* 

* Returns EWS_STATUS_OK on success, else error code (TBD) 

extern EwsStatus evsDocumentRemoveArchive { EwsArchive descriptor ) ; 

#endif /* EW_CONFIG_OPTION_CLEANUP •/ 

./• 

* ewsDocumentArchiveName 
« 

* Returns the archive name as stored in the archive by the EmWeb /Compiler , 

* or NULL on error . 
*/ 

extern const char * ewsDocumentArchiveName ( const uinte *datap ) ; 
/* 

* ewsDocumentArchiveDate 
* 

* Returns the RFC1123 date string stored in the archive header generated 

* by the EmWeb/Compiler when the archive was created, or NULL on error. 
* 

* There is also a routine for the less preferred RFC1036 representation. 
•/ 

extern const char * ewsDocumentArchiveDate ( const uint8 *datap ) ,* 
extern const char * ewsDocumentArchiveDatel036 ( const uintS *datap ); 

#ifdef EW CONFIG OPTION DEMAND_LOADING 



* DEMAND LOADING 
* 

* In order to implement on-demand archive loading, the application may 

* register document URLs with the EmWeb/Server which are valid but not 

* loaded. This is done by invoking ewsDocumentRegister () . If a registered 

* document is requested, the EmWeb/Server will notify the application by 

* invoking ewaDocumentFault () . At this point, the application may load 

* a new archive (possibly removing a previously installed archive to make 
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* room) . When the ai chive containing the page is installed, the EmWeb /server 

* will automatically complete processing the request. The request can be 

* aborted either immediately by returning EWA_STATUSJ5RROR from the 

* ewaDocumentFault () function, or by invoking e wsNetHTTP Abort 0 . 
* 

* Once a document is registered, there is no need to re-register it in the 

* event that the corresponding archive is removed. EmWeb/Server remembers 

* that the document has been registered as dynamically loadable. However, 

* the application may deregister a document by invoking 

* ewsDocumentDeregister () . 



/• 

* ewsDocumentRegister 

* Registers the URL of a document vith the run -time database indicating that 

* the given document is valid but not currently loaded into memory. 
* 

* url * local URL of document to be registered 

* handle • application- specif ic handle passed to ewaDocumentFault 0 
* 

* Returns document descriptor, or EWS DOCUMENT NULL on failure. 
*/ 

extern EwsDocument ewsDocumentRegister 

( const char * url, EwaDocumentHandle handle ) ; 



h 

* ewsDocumentDeregister 

* Unregisters a previously registered document from the run- time database 

* indicating that the given dynamically * loadable document is no longer valid. 

* document - descriptor of document to be deregistered 
* 

* Returns EWS STATUS OK on success, else error code (TBD) . 

extern EwsStatus ewsDocumentDeregister ( EwsDocument document ) ; 

flifndef ewaDocumentFault 
/* 

* ewaDocumentFault (Application) 

* This function must be provided by the application, and is invoked by 

* EmWeb/Server when a registered document has been requested but is not 

* currently loaded into memory. 
* 

* context ■ context of request for document 

* handle application- specific handle from ewsDocumentRegister {) 
* 

* Returns EWA_STATUS_OK on success, EWA_STATUS_OK_YIELD on success with 

* request for EmWeb/Ierver to yield the CPU, or EWA_STATUS_ERROR on failure. 

* If failure status is returned, the request is aborted. Otherwise, the 

* request will complete after the document has been loaded into memory. 
•/ 

extern EwaStatus ewaDocumentFault 

( EwsContext context, EwaDocumentHandle handle ) ; 
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#endif 

flendif /• EWJTONFIG_OPTION_DEMAND_LOADING •/ 
#ifdef EW_CONFIG_OPTION_CLONING 

/•••••••• ***** ****** 

* DOCUMENT CLONING 
* 

* Documents may be cloned and assigned to a new URL. This allows multiple 

* instances of a document to exist. An application* specif ic handle can be 

* used to identify an instance of a document from the request context. 
* 

* The application clones a document by invoking ewsDocumentClone () . The 

* cloned document may be removed by invoking ewsDocumentRemove () . All 

* clones created from documents in an archive must be removed before the 

* archive can be removed. 



* ewsDocumentClone 

* Clone an existing document under a new URL in the database. 

* baseurl •' URL of existing document 

* newuil • URL of new cloned document 

* handle • application- specif ic handle available in request context 
* 

* Returns document descriptor or EWS_DOCUMENT_NULL on error. 
•/ 

extern EwsDocument ewsDocumentClone 

{ const char * baseurl, const char * newurl, EwaDocumentHandle handle ); 

/• 

* ewsDocumentRemove 

* Remove a previously cloned document from the database. 
* 

* document • document descriptor of previously cloned document. 
* 

* Returns EWS_STATUS_OK on success, else error code (TBD) . 
./ 

extern EwsStatus ewsDocumentRemove ( EwsDocument document ) ; 
#endif /*. EW_CONFIG_OPTION_CLONING */ 

ffifdef EW CONFIG OPTION J)OCUMENT_DATA 

* ewsDocumentData 

* Retrieve pointer to raw data and data size from URL in archive 
* 

* uxl • url of document 

* bytesp • output: size of document (as -is in archive) in bytes 

* datapp • output; pointer to start of document 
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* Returns EWS STATUS OK on success, else erior code (TBD) . 
*/ 

extern EwsStatus ewsDocumentData ( const char * url 

, uint32 *bytesp 

, const uint8 **datapp ) ; 
tfendif /* EW_CONFIGjDPTIONJ)OCUMENTJDATA */ 

tfifdef E W_CONFI G_OPTI ON_DOCUMENT_SET_REALM 

#ifdef EW_CONFIG_OPTION AUTH 

/? 

* ewsDocumentSetRealm 

* Set or change authentication realm of document at run- time. 
* 

* url - url of document 

* realm * name of authentication realm, or NULL (or ) to disable'. 
* 

* Returns EWS_STATUS OK on success, else error code. 
*/ 

extern EvsStatus ewsDocumentSetRealm (. const char * url, const char *realm ); 

tfendif /* EW_CONFIGJDPTION_AUTH */ 

#endif /• EW_CONFIG~OPTION~DOCUMENT_SET_REALM */ 

#endif /* _EWS_D0C_H */ 
A-2.6, src/include/ews_auth.h 

This file contains the definitions and prototypes of the authorization and security functions 
of the application interface. 

/• 

* evs_auth.h,v 1.18 1997/05/21 21:55;44 ian Exp 

* Product: EmWeb 

* Release: R2_l 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 

* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING . 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS, INC. 

* Copyright (O 1996, 1997 Agranat Systems, Inc. 

* All Rights Reserved 

* Agranat Systems, Inc. 

* 1345 Main street 

* Waltham, MA 02154 

* (617) 893-7868 

* sales@agranat.com, support©agr anat.com 

* http: //wv. a granat.com/ 

* EmWeb/Server application interface to authorization database 
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(ttfndef _EWS_AUTH_H_ 
#def ine ~EWS_AUTH_H_ 

tfifdef EW_CONFIG_OPTION_AUTH 

^include "ew_cypes.h" 
#include "ew_config.h" 



» HTTP Authorization techniques are discussed in the HTTP specifications. 
« Knowledge of these principles are essential for correct use of these : 

* authorization interfaces. 

* One or more HTML documents can be assocaced with a single "realm". A realm 

* is a case- sensitive ascii string that defines a "protection space" for the 

* associated document (s). 

* Each realm can have zero or more authentication entries associated with it. 

* If a realm has no authentication entries, then it is considered 

. -unprotected" by the server, and its acess will always be granted to any 

* requesting client. 

* For those realms with authentication entries, any client that attempts to 

* access any document associated with that realm will be required to 

. authenticate itself. To authenticate, the client must send authentication 
. parameters that validate against at least one authentication entry for that 

* document's realm. Clients that do not authenticate are not served the 

* requested document- 

* For example, assume a realm exists called "foo". It has three 

* authentication entries associated with it (2 using the "basic" scheme 

* defined in the HTTP specification, and one other ficticious type) : 

* 

* REALM: "foo" 

* Authentication Entry 1: 

* Type: "basic" 

« parameters: Username*"userl" 

^ Password* "guest" 

EwaAuthHandle: application' s entryl identified 

* 

* Authentication Entry 2: 

* Type: "future" 

* parameters: index*37 

cookie="837I8U9" 
. token- "S37" 

* EwaAuthHandle: application' s entry2 identifier > 
* 

Authentication Entry 3: 

* Type: "basic" 

parameters: Username«"sinclair" 
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* Password* "baby Ion" 

* EwaAuthHandle: <appli cation 1 s entry3 identified 
* 

* When a client attempts to access a document associated with lealm "foo", it 

* will need to authenticate against one of the above entries. Which one the 

* client authenticates against is at its disgression. 
* 

* When a client does authenticate against one of the above entries, the 

* EwaAuthHandle for that entry is stored in the current context for the 

* document (EwsContext) . The datatype of this EwaAuthHandle is 

* implementation-defined. ^ 

* Types & Constants 

BiB»«tCOOCBBDCCCCCBCCCC»«»»*C!:COn«Bl«r«BBIlBO»lCCOI!t!B«C»«CC ./ 

/* 

* Defines the authorization schemes supported by the EmWeb server. 

* New schemes will be added as they are supported. 
*/ 

typedef enum 
{ 

ft ifdef EW_CONFIG_OPTION_AUTH_BASIC 

ews Au thS chemeBa sic, 
ft endif /* EW_CONFIG_OPTION_AUTH_BASIC */ 

ft ifdef EW_CONFIG_OPTION_AUTH_DIGEST 

ewsAuthSchemeDigest, 
ft endif /* EW_CONFIG_OPTION_AUTK_DIGEST •/ 

ft ifdef EW_C0NFIG_0PTI0N_AUTH_M3ASIC 

ews Au t hS chemeManua IBa s i c , 
ft endif /« EW_CONFIG_OPTION_AUTH_MBASIC •/ 

ft ifdef EW_CONFIG_0PTI0N_AUTH_MDIGEST 

ewsAuthSchemeManualDigest, 
ft endif /• EW_CONFIGJDPTION_AUTH_MDIGEST •/ 

evsAuthMaxScheme /* count of supported schemes */ 

} EwsAuthScheme; 

/* 

* this structure defines parameters for all the supported 

* authorization types. New parameters will be added in 

* to this structure in the future 
•/ 

typedef union 
{ 

ftifdef £W_CONFIG_OPTION_AUTH_BASIC 
struct 
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{ 

char »userName; 
char *passWord; 
} basic; 

#endif /• EWj:ONFIGJ>PTION_AUTHJBASIC */ 
#if defined (EW^CONFIG^OPTION^AUTH^DIGEST) || 
defined (EW_CONFIG_OPTION_AUTH_MDIGEST) 

struct 

{ 

char •userName; 
char -password; 

# ifdef EWJTONFIG_OPTIONJrtJTH_DIGEST_M 

boolean digestRequiredT /• require client message data verification */ 

# endif /* ewj:onfig_option_aoth_digest_m */ 

) digest; 

#endif /* EW_CONFIG_OPTION_AUTH_DIGEST I I EW_CONFIGJ)PTION_AUTH_MDIGEST */ 

char reservedl; 
] EvsAu thPa r ame ter s ; 



* This structure represents a single authorization entry. 
*/ 

typedef struct 
{ 

EwsAu thScheme scheme; 
EwsAuthParameters params; 
EwaAuthHandle handle; 
} EwsAu thor i za t i on ; 



/* user defined */ 



* Interfaces 



* ewsAuthRegister 

* And a new authorization entry to the realm. 

* realm - Input, case sensitive asciiz realm name. 

* authorization - Input, buffer containing authorization entry information. 

* This buffer is free for use by the caller on return. 

* Returns a non-NULL handle to the authorization entry, or NULL on failure. 

extern EwsAuthHandle ewsAuthRegister 

( const char -realm, const EwsAu thor izat ion "author ization ); 
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* ewsAuthRemove 

* Deletes a particular authentication entry identified by handle. 
* 

* handle • Input, The handle that was returned by ewsAuthRegister 0 for 

* this entry. 
* 

* Returns EWS_STATUS OK on success, else failure code, 
extern EvsStatus ewsAuthRemove ( EwsAuthHandle handle ) ; 

/* 

* ewsAuthRealmEnable 

* Enables a realm to restrict access to documents (restricted by default). 
* 

* realm - Input, the realm to restrict 
* 

* Returns EWS STATOS_OK on success, else failure code 
*/ 

extern Ewsstatus ewsAuthRealmEnable ( const char * realm ) ; 

h 

* ewsAuthRealmDi sable 

• * Disables a realm causing documents in that realm to be generally accessible. 

* realm - Input, the realm to restrict 
* 

* Returns EWS_STATUS_OK on success, else failure code 
•/ 

extern EvsStatus ewsAuthRealmDi sable ( const char * realm ) ; 
/*. 

* ewaAuthRealmQualifier 

* Returns realm qualifier string to append to realm names, or NULL 
•/ 

Uifndef ewaAuthRealmQualif ier 

extern const char * ewaAuthRealmQualifier ( void >; 
flendif /* ewaAuthRealmQualif ier •/ 

#if defined (EW_CONFIG_OPTION_AUTH_DIGEST) \ 
| | defined (EW_CONFIG_OPTION_AUTH_MDIGEST) 



* ewaAuthNonceCreate 

* Create raw input used to generate one-time authentication challenges 

* given a request context and realm. 
• 

* context • request context 

* realm • null- terminated stiing containing name of realm 

* noncep • pointei to application-specific nonce parameters 
* 

* No return value 
•/ 

extern void ewaAuthNonceCreate 

( EwsContext context, const char * realm, EwaAuthNonce *noncep ); 
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* ewaAuthNonceCheck 

* Validate chat the previously created nonce is valid given the current 

* request. 
* 

* context - request context 

* realm • null- terminated string containing name of realm 

* noncep * pointer to requested nonce parameters 

* count - previous use count (0, 1, ...) of nonce value 
« 

* Returns ewaAuthNonceOK on success, ewaAuthNonceStale if valid but expired, 

* or ewaAuthNonceDenied if nonce is not permitted given the request context. 

*/ 

typedef enum EwaAuthNonceS tatus_e 
{ 

ewaAuthNonceOK, /* nonce value valid for request */ 

ewaAuthNonceLastOX, /* nonce value valid, but won't be again */ 

ewaAuthNonceStale, /* nonce value is stale, generate new nonce */ 

ewaAuthNonceDenied /• nonce value is invalid */ 
} EwaAuthNonceS tatus; 

extern EvaAuthKonceStatus evaAuthNonceCheck 

( EwsContext context, const char * realm, EwaAuthNonce *noncep, uintf count ); 
tfendif /* EW_CONFIG_OPTION_AUTH_ (M) DIGEST •/ 



#ifdef EW_CONFIG OPTION_AUTH_MBASIC 

h 

ewaAuthCheckBasic 

Given the current context, realm, base64 cookie, and optionally 
decoded username/password text, determine if the authorization should 
be granted or denied. 

context • (input) request context 

realm • (input) null • terminated string containing name of realm 
basicCookie * (input) the base64 encoding of the text user :password, 

as described in the HTTP RFC. 
userName • (input) if EW_CONFIG_OPTIONJWTH_MBASIC_DECODE is defined, 
then this parameter points to a null terminated string 
containing the user name decoded from the basicCookie. If 
EW_CONFIGJ)PTION_AUTHJ4BASIC_DECODE is not defined, this 
is a NULL pointer . 
password - (input) if EW_CONFIG_OPTION_AUTH_MBASIC_DECODE is defined, 
then this parameter points to a null terminated string 
containing the password decoded from the basicCookie. If 
EW_CONFIG_OPTION_AUTH_MEASIC_DECODE is not defined, this 
. is a NULL pointer . 

Return value: boolean, if TRUE, then the authorization is granted and 
the document is served, otherwise, authorization is denied. 

This function can be supended by ewsSuspend () . It's return values 
are ignored, and it will be recalled with the same parameters when 
the context is resumed using ewsResumeO . 
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*/ 

flifndef ewaAuthCheckBasic 

extern boolean ewaAuthCheckBasic ( EwsContext context 

, const char "realm 
, const char "basicCookie 
, const char "userName 
, const char "password ); 

flendif /* ewaAuthCheckBasic */ 

#endif /* EW_CONFI G_OPTION_AUTH_MBAS I C */ 



flifdef EW C0NFIG_OPTION_AUTH_MDIGEST 

h 

* ewaAuthCheckDigest 

* Given the current context, realm, username, and nonce, 

* return the corresponding MD5 hash of the username : realm:password 

* text. This text will be used by the server to verify the 

* authorization attempt by the client. 
* 

* context - (input) request context 

* realm • (input) null- terminated, string containing name of realm 

* taken from the request header. 

* nonce • (input) null - terminated string containing the nonce that 

* was supplied to the server. 

* userName * (input) this parameter points to a null terminated string 

containing the user name as supplied in the authorization 

* request header. 

* digest - (output) on return, "digest will point to a null- terminated 

* ascii text string representing the MD5 checksum of the 

* username, realm and password (MD5 ( username : realm :password) ) 
» as described in the Digest Access Authentication RFC2069 

* 

* Return value: boolean, if TRUE, then "digest points to a valid MD5 hash of 

* username :realm:password, which will be used by the server to complete 

* the authorization process (which may or may not be granted) . If FALSE , 

* the authorization is immediately denied. 
* 

* This function can be supended by ewsSuspend {) . It's return values 

* are ignored, and it will be recalled with the same parameters when 

* the context is resumed using ewsResumeO. 
*/ 

tfifndef ewaAuthCheckDigest 

extern boolean ewaAuthCheckDigest ( EwsContext context 

, const char "realm 
, const EwaAuthNonce "noncep 
, const char "userName 
, const char '"digest ); 

#endif /* ewaAuthCheckDigest */ 

#endif /• EW_C0NFIG_OPTI0NJttrTH_MDIGES7 "/ 

tfifdef EWj:ONFIGJDPTION_AUTH_VERIFY 
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h 

* evaAuthVerifySecuricy 

* Called _after_ the server has determined that the authorization 

* will be granted for the request, this function allows the application 

* to "short circuit" the authorization based on information about 

* the request (eg, IP address of client, etc.). The method used 

* to determine whether or not the request is authorized is proprietary 

* to the application. 
* 

* context • (input) request context 

* realm • (input) null- terminated string containing name of realm 

* taken from the request header. 

* Return value: boolean, if TRUE, then the authorization is granted, and 

* the document will be served to the client. If FALSE, 

* the authorization is immediately denied. 
* 

* This function can be supended by ewsSuspend ( ) . It's return values 

* are ignored, and it will be recalled with the same parameters when 

* the context is resumed using ewsResumeO. 
*/ 

Sifndef ewaAuthVerifySecuri ty 

extern boolean evaAuthVeiifySecurity ( EwsContext context 

, const char *realm ); 

#endif /* ewaAuthVer ifySecurity */ 
#endif /* EW_CONFIGJ>PTI0N_AUTH_VERIFY */ 



*** Local Variables: *** 

*** mode: c **• 

*** tab-width: 4 *** 

*** End: •** 

*/ 

flendif /• EW_C0NFIG_OPTI0N_AUTH */ 
#endif /* _ews_AUTH_H_ */ 



A-2.7. src/include/ews_ctxt.h 

This file contains definitions and prototypes of the request context access functions of the 
application interface. 

* ews_ctxt.h,v 1.14 1997/05/25 23:30:32 giusti Exp 

* Product: EmWeb 

* Release: R2_l 
« 

* CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS , INC. 
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* THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 

* EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 
* 

* Copyright (C) 1996, 1997 Agianat Systems, Inc. 

* All Rights Reserved 
* 

* Agraixat Systems, Inc. 

* 1345 Main Street 

* Waltham, MA 02154 
* 

* (617) 893-7868 

* sales@agranat.com, support@agxanat.com 
* 

* http://vArfv.agranat.com/ 

* EmWeb/Server public definitions 

flifndef _EWS_CONTEXT_K 
^define ~EWS_CONTEXT_H 

^include "ev_types.h" 
^include "ev_config.h M 
^include "evs_def.h" 

/* 

* REQUEST CONTEXT 
« 

* Each HTTP request received by EmWeb/Server is assigned a unique context. 
« The context structuie contains all the. information pertaining to the 

* request, as veil as internal state information regarding the processing 

* state of the request. 
* 

* API functions are provided to give the application some visibility into 

* the current context state. 
*/ 

/• 

* evsContextNetHandle 

* Return the application-specific netvork handle provided to EmWeb/Server 

* by the application in evsNetHTTPStart 0 . 
*/ 

EvaNetHandle evsContextNetHandle ( EvsContext context ) ; 

*if defined (EW_C0NFIG_OPTION_DEMAND_L0AT)ING) \ 
|| defined (EW_CONFIG_OPTION_CLONING) 

/* 

* evsContextDocumentHandle 

* Return the application- specif ic document handle provided, to EmWeb/Server 

* by the application in ewsDocumentRegister ( ) or evsDocumentClone 0 . 

* / 

EvaDocumentHandle evsContextDocumentHandle ( EvsContext context ) ; 
ftendif /• EW CONFIG OPTION DEMAND LOADING || EW_C0NFIG_OPTION_CLONING •/ 
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#ifdef EW CONFIG_OPTION_AUTH 
/• 

* ewsContextAuthHandle 

* Return the application- specif ic authorization handle provided to 

* EmWeb/Server by the application in ewsAuthRegister ( ) . 

•/ 

EwaAuthHandle ewsContextAuthHandle ( EwsContext context ) ; 
#endif /* EW_CONFIG_OPTION_AUTH •/ 

#i f def EW_CONFIG_OPTION_SCHED_SUSP_RES 
/* 

* ewsContextlsResuming 

* Return TRUE if EmWeb/Server is resuming (as a result of ewsResumeO) after 

* the context was suspended (as a result of ewsSuspendO ) . 
*/ 

boolean evsContextlsResuming { EwsContext context ) ; 
#endif /• EW_CONFIG_0?TION_SCHED_SUSP_RES */ 

#if defined (EW_CONFIG_OPTION_STRING) || defined (EW_CONFIGJ>PTION_INCLUDE) 

* ewsContextlterations 

* Returns the iteration count corresponding for EMWEB_ITERATE 
*/ 

uint32 ewsContextlterations ( EwsContext context ) ; 

#endif /* EW_CONFIG_OPTION_STRING I I EW_CONFIG_0?TION_INCLUDE •/ 

#i f def EW_CONFIG J)PTION_CONTEXT_SEND_REPLY 
/• 

* ewsContextSendReply 

* Serves specified local path URL to browser in response to form submission 

* or raw CGI . 
*/ 

EwsStatus ewsContextSendReply ( EwsContext context, char * url ) ; 
#endif /• EW_CONFIG_OPTICN_CONTEXT_SENB_REPLY */ 

#if defined ( EW_CONFIG_OPTION_FILE_GET ) \ 
M defined ( EW_CONFIG~OPTION_FILE_PUT ) \ 
|| defined ( EWj:ONFIG~omON_FILEJDELETE ) 
EwsStatus ewsCon'textSetFile( EwsContext context 

,EwsFileParamsP params 
) ; 

#endif /* EW_CONFIG_OPTION_FILE_XXX */ 



* The following- functions extract the corresponding fields from the KTTP/1.0 

* request header, if present, into an application-provided buffer. Each of 

* these functions return the number of bytes in the actual header value, even 

* if this is larger than the application-provided buffer (though EmWeb/Server 

* will not overwrite the applicatoin buffer by honoring the buffer length) . 

* If the header is not present, zero is returned. The application may 

* specify a zero -length buffer in order to determine the size of the header 

* value. The returned value begins with the first non-whi tespace following 

* the HTTP header and ends just before the terminating end-of-line 
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* character (s) . 
•/ 

tfifdef EW_CONFIGJDPTION_CONTEXT_DATE 

uintf evsContextDate { EwsContext context, char *datap, uintf length ); 
#endif /* EWj:ONFIG_OPTION_CONTEXT_DATE */ 
tfifdef EW_CONFIG_OPTION_CONTEXT_PRAGMA 

uintf evsContextPragma ( EwsContext context, chai *datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CONTEXT_PRAGMA •/ 
#ifdef EW_CONFIG_OPTION_CONTEXT_FROM 

uintf evsContextFrom ( EwsContext context, char *datap, uintf length ); 
flendif /* EW_CONFI G_OPTI ON_CONTEXT_FROM */ 
tfifdef EW_CONFIG_OPTION__CONTEXT_IF_MODIFIED_SINCE 
uintf evsContextlfModifiedSince 

( EwsContext context, char *datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CONTEXT_IF_MODIFIED_SINCE */ 
#ifdef EW_CONFIG__OPTION_CONTEXT_REF£RER 

uintf evsContextReferei ( EwsContext context, char *datap, uintf length ); 
#endif /• EW_CONFIG_OPTION_CONTEXT_REFERER •/ 
# i f de f EW_CONFI G_OPTI ON_CONTEXT_USER_AGENT 

uintf ewsContextUseiAgent ( EwsContext context, chai *datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CONTEXT_USER_AGENT •/ 
#ifdef EW_CONFIG_OPTION_CONTEXT_HOST. 

uintf ewsContextHost ( EwsContext context, chai *datap, uintf length ); 
#endif /• EW_CONFIG_OFTION_CONTEXT_HOST •/ 

#endif /* _EWS_CONTEXT_H •/ 



A-2.8. src/include/ews_cgi.h 

This file contains the definitions and prototypes of the raw CGI functions of the application 
interface. 



ews_cgi.h,V 1.22 1997/03/29 17:50:49 ian Exp 

Product: EtnWeb 
Release: R2_l 

CONFIDENTIAL AND PROPRIETARY INFORMATION OF AGRANAT SYSTEMS, INC. 
THE EMWEB SOFTWARE ARCHITECTURE IS PATENT PENDING. 
EMWEB IS A TRADEMARK OF AGRANAT SYSTEMS , INC. 



Copyright (C) 1996, 1997 Agranat Systems, Inc. 
All Rights Reserved 

Agranat Systems, Inc. 
1345 Main Street 
Waltham, MA 02154 

(617) 893-7868 

sales®agi ana t . com , suppoi t©agr a na t . com 
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* http://wwv.agranat.com/ 
. 

* EmWeb/Servei application interface to raw CGI 
* 

*/ 

#ifndef _EWS_CGI_H 
#def ine _£WS~CGI_H 

^include #, ew_types .h" 

/...*.*.*....*.**...•....** 

* CGI INTERFACE 
* 

* EmWeb supports a raw CGI interface for imagemap and various special 

* application-defined CGI capabilities. 
. 

* The EmWeb/Compiler creates CGI URLs from specifications provided in 

* ^ACCESS files. The application provides two functions for each CGI URL. 

* First, there is the CGI start function. This is invoked by the 

* EmWeb/Server to mark the start of a new CGI request. Second, there is the 

* CGI data function. This is invoked by the EmWeb/Servei one or moie times 

* to pass network buffers containing raw CGI request data to the application. 

* The end of request data is indicated by an EWA_NET_BUFFER_NULL EwaNetBuf f er . 
* 

* The CGI application uses the ewsCGIDataO function to transmit response data 

* to the network. 

* * ***** */ 
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/* 

* ewaCGIStart 
* 

* This per -CGI function is provided by the application. It is invoked by 

* EmWeb/Server at the start of a new request to the corresponding CGI URL . 

* The application may return an application-specific handle. 
* 

* context • context of current request 
★ 

* Returns application -specific handle to be used by EmWeb/Server in 

* subsequent calls to ewaCGIData. 
*/ 

typedef EwaCGIHandle EwaCGIStart_f ( EwsContext context ) ; 



/* 

* ewaCGIData 
* 

* This per; CGI function is provided by the application. It is invoked by 

* EmWeb/Server zero or more times to pass raw CGI request data to the 

* application. 
* 

* cgi_handle - application- specif ic handle as defined by ewaCGIStart 

* buffer - application buffer containing all or part of the raw CGI 

* request data 
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* No return value 

typedef void EwaCGIData_f ( EvaCGIHandle cgi_handle, EvaNetBuffer buffer ); 

#ifdef EW_CONFIG_OPTION_CGI 

/« 

* evsCGISendStatus 

* This optional call causes the EmWeb/Server to construct and send an 

* appropriate HTTP status header (and possibly other server -generated 

* headers). It must be followed by one or more calls to ewsCGIDataO to send 

* additional header information and optional body content. (Note that a call 

* to ewsCGIDataO must not precede the invocation of this function). 
« 

* Note: If the application desires complete control of the response, it may 

* simply send all header information itself using ewsCGIDataO instead of 

* invoking this function. 
* 

* context - context of request 

* status • 3 -digit status code followed by reason string 

* string ■ string containing additional headers and/oi data, or NULL 
* 

* Returns EWS_STATUS_OK on success, else error code (TBD) . 
*/ 

extern EwsStatus ewsCGISendStatus 

( EwsContext context, const char * status, const char * string ); 



* ewsCGIData 

* This function is called by a raw CGI application one or moie times to send 

* raw CGI response data to the browser client. The application is responsible 

* for throttling its use of the CPU. Note that response data may include raw 

* HTTP headers as well as data. Therefore, a CR-NL sequence must be 

* transmitted to properly delimit the header portion of the response from 

* any returned data. 

* Note that ewsCGISendStatus 0 may be called once before any calls to 

* ewsCGIDataO to generate standard HTTP headers. Otherwise, the application 

* must generate all standard headers itself. 

* Note that sending a EWA_NET_BUFFER_NULL terminates the request. 

* context - context of request 

* buffer • buffer containing data to send, or EWA_NET_BUFFER_NULL 

* if this is the last buffer in the response. 

* No return value 
*/ 

extern EwsStatus ewsCGIData ( EwsContext context, EwaNetBuffer buffer ); 

h 

* ewsCGIRedirect 

* This call causes the EmWeb/Server to respond to the browser with the 
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* document specified by the URL (if local), 01 with a redirect (if not). 

* This function will terminate the request. Note that this feature can not 

* be used in conjunction with ewsCGIDataO or ewsCGIStatus 0 . 
* 

* context • context of request 

* url ■ URL fox redirect 
* 

* Returns EWS_STATUS_OK on success, else error code (TBD) . 

extern EwsStatus ewsCGIRedirect ( EwsContext context, const char *url ); 

#i f def EWJTONFIG JDPTION JTGI_SERVER_SOFTWARE 
/* 

* ewsCGIServerSof cware 
* 

* Returns a string corresponding to the server software such as 

* "Agranat-EmWeb/R2_l" 

extern const char -ewsCGIServerSof tware ( void ); 
flendif /* EW_CONFIG_OPTION_CGI_SERVER_SOFTWARE */ 

tfifdef EW CONFIG OPTION_CGI_GATEWAY_INTERFACE 
/* 

* ewsCGIGatewaylnterface 
* 

* Returns a string corresponding to the CGI version "CGI/1. 0" 
*/ 

extern const char * ewsCGIGatewaylnterface ( void ); 
#endif /* EW_CONFIG_OPTION_CGI_GATEWAY_INTERFACE •/ 

#ifdef EW_CONFIGJDPTION_CGI_SERVER_PROTOCOL 

* ewsCGIServerProtocol 

* context - context of request 

* datap * pointer to data buffer 

* length - size of data buffer (may be zero) 
# 

* Returns number of bytes in actual protocol string, or zero if not present. 

extern uintf ewsCGIServerProtocol 

( EwsContext context, char *datap, uintf length ) ; 
#endif /* ew_config_option_cgi_server_protocol •/ 

Sifdef ew_config_option_cgi_reouest_method 

* ewsCGIRequestMethod 
• 

* context - context of request 

* datap • pointer to data buffer 

* length • size of data buffer (may be zero) 

* Returns number of bytes in actual request method, or zero if not present. 
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extern uintf ewsCGIRequestMethod 

( EwsContext context, char *datap, uintf length ); 
*endif /* EW_CONFIG_OPTION_CGIJlEQraST_METHOD */ 

#ifdef EW_CONFIG_OPTION_CGI PATH INFO 
/• 

« ewsCGIPathlnfo 

* context - context of request 

* Returns pointer to Pathlnfo string, or NULL if not present 
*/ 

extern const char * ewsCGIPathlnfo ( EwsContext context ) ; 
#endif /* EW_CONFIGJDPTION_CGI_PATH_INFO */ 

tfifdef £W_CONFIG OPTION_CGI SCRIPT_NAME 

h 

* ewsCGIScriptName 

* context • context of request 
* 

* Returns pointer to script name string 
*/ 

extern const char * ewsCGIScriptName ( EwsContext context ) ; 
#endif /• ew_config_option_cgi_script_name »/ 

#i f def EW CONFIG OPTION CGI QUERY_STRING 

h 

* ewsCGIQueryString 
* 

* context * context of request 

* datap • pointer to data buffer 

* length • size of data buffer (may be zero) 
* 

* Returns number of bytes in actual query string, or zero if not present. 
•/ 

extern uintf ewsCGIQueryString 

( EwsContext context, char *datap, uintf length ); 
#endif /* EW_CONFIG_OPTION_CGI_QUERY_STRING */ 

#ifdef EW CONFIG_OPTION_CGI_CONTENT_TYPE 

* ewsCGIContentType 
* 

* context - context of request 

* datap • pointer to data buffer 

* length • size of data buffer (may be zero) 
* 

* Returns number of bytes in actual content type, or zero if not present. 
*/ 

extern uintf ewsCGIContentType 

( EwsContext context, char *datap, uintf length ); 
#endif /• EW_CONFIGJDPTION_CGI_CONTENT_TYPE •/ 
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tfifdef EW_CONFIG_OPTION CGI_CONTENT_LENGTH 
/• 

* evsCGIContentLength 

* context • context of request 

* Returns content length as specified by client, or 2ero if not present, 

* or EWS_CGI_CONTENT_LENGTH_CHUNKED i f chunked. 

•/ 

#define EWS_CGI_CONTENT_LENGTH_CHUNKED Oxffffffff 
extern uint32 evsCGIContentLength ( EvsContext context ) ; 
flendif /• EW^CONFI G_OPTI ON_CG I_CONTENT_LENGTH */ 

#i f def EW_CONFIG_OPTION_CGI_CONTENT_ENCODING 

h 

* evsCGIContentEncoding 

* context • context of request 

* datap - pointer to data buffer 

* length * size of data buffer- (may be zero) 
* 

* Returns number of bytes in actual content encoding, or zero if not present. 
•/ 

extern uintf evsCGIContentEncoding 

( EvsContext context, char *datap, uintf length J; 
flendif /• EW_CONFIG_OPTION_CGI_CONTENT_EN CODING ■/ 

#endif /* EW_CONFIG_OPTION_CGI »/ 

ftendif /• _ews_cgi_H */ 
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/* 

* lid: ew_db.h,v 1.30 1997/06/28 11:59:50 ian Exp $ 
* 

* Product: EmWeb 

* Release: $Name: $ 
* 

* %CopyRight% 

* EmWeb database definitions 
* 

*/ 

tfifndef _EW_DB_H 
#def ine _EW_J>B_H 

# include "ew_common.h n 

include »'ew_types .h n 
^include w ew_f orm.h" 
^include "ew_imap.h" 
^include "ews_def.h» 
^include M ews_cgi.h" 

/••• ; * * * ***** 

* DOCUMENT ARCHIVE 
» 

* An EmWeb document archive contains two parts. These are the archive data 

* component and the archive object -component. 
* 

* The archive object component contains all the run- time object code 

* associated with an archive. A public symbol (determined by EmWeb/ Compiler 

* on a per-archive basis) points to an archive descriptor (EwsArchive) . This 

* contains all of the linkage required by the EmWeb/Server to access the 

* archive-specific run-time object code. 
* 

* The archive data component contains all the static data describing 

* individual documents in the archive. The data component is an endian- 

* independent fully relocatable contiguous block of constant data 

* analogous to a file. In fact, it could be a file. The data component 

* begins with an archive header and contains one or more documents. 



/• 

» Archive Descriptor 
* 

"* Each archive has a unique archive descriptor in the object component of the 

* archive. The archive descriptor is a list of functions called by the 

* EmWeb/Server to execute archive-specific object code while processing 

* requests for documents in the archive. Unsupported functions (i.e. 

* features not selected when the EmWeb/ Compiler was built) are represented 

* by a NULL pointer. 
•/ 

typedef const void r EmWebString_f ( EwsContext context, uint32 index ) ; 
typedef const char * EmWeb Included ( EwsContext context, uint32 index ); 

/* Cookie Attribute structure, element of emweb_cookie_tbl U */ 
typedef struct EwCookieAttr_s { 

char *name; 

char *path; 
) EwCookieAttributes; 



typedef struct EmWebCGITable_s 
{ 

EwaCGIStart_f *start_f ; 
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EwaCGiData_f *data_f ; 

) EmWebCGITable, *EmWebCGITableP; 

typedef struct EwsArchive_s 

uint32 magic; /• Magic number for archive validation */ 

# def ine EW ^RCHIVE^OB JECT_MAGIC ( ( ' E ' «2 4 ) I ( ' w «1€ ) I { ' o ' «8 ) I ' b ' ) 

uint8 versiomna j ; /* Archive version (major /minor) */ 

uint8 version_min; 

# define EW^ARCHIVE_yERSION_WAJ 1 

# define EW_ARCHIVT_yERSION_MIN 1 

uint8 compiler_maj ; /* EmWeb/ Compiler version (major/minor) •/ 

uint8 compiler_min; 

# define EW _ J ARCHIVE_DAT£_1123_SIZE 32 

char date_1123[EW _ARCHIVE_PATE_1123_SIZE] ; /* creation date */ 

/* 

* Archive-specific <EMWEB_STRING> dispatch function. Takes context 

* and index arguments. Index selects the C-code fragment corresponding 

* to an instance of <EMWEB_STRING> . 
•/ 

EmWebString_f *emweb_s tring ; 

/* 

* Archive-specific <emweb_INCLUDE> dispatch function. Takes context 

* and index arguments. Index selects the C-code fragment corresponding 

* to an instance of <EMWEB_INCLUDE> . 
•/ 

Emweblnclude_f • emweb_include ; 

/* 

* Archive-specific form table. The Form node index is hierarchical and 

* contains a form number and. an element number. The form table is 

* indexed by form number (0..n-l). Each form table entry contains a 

* pointer to an array of field elements indexed by one less than the 

* element number. (An element number of zero starts the form, and 

* an element number greater than the number of elements in the form 

* ends the form) . The table contains all the necessary information to 

* serve and submit forms. The emweb_f orm_enum_table is a list of strings 

* corresponding to RADIO and single SELECT values. 
- */ 

const EwFormEntry *emweb_f orm_table; 
uint32 emweb_form_table_size; 
const char **emweb__f omuenunutable; 
uint32 emweb_f orm_enum_table_size ; 

/* 

* Archive-specific imagemap table. The table represents imagemaps 

* compiled by the EmWeb/ Compiler into the archive. This table is 

* indexed by a document node corresponding to the mapfile.- The 

* table entry contains a table of rectangular regions which are scanned 

* for matching x,y coordinates to find a match. 
*/ 

const EwimageMapTable *emweb_image_table; 
u i nt 32 emweb_image_table_size; 

/* 

* Archive-specific CGI action dispatch table. 
•/ 
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* Reference count - this is initialized to zero by the EmWeb/ Compiler, 

* but is writable {.data section). This value is incremented for each 

* cloned page It is also incremented for each page currently in use by an 

* uncompleted request. This prevents the application from attempting to 

* remove an archive that is in use. 
•/ 

uint32 reference_count; 



* Document list - this is the anchor of a list of loaded documents and 

* is used exclusively by EmWeb/Server to keep track of per-document nodes 

* created when loading the archive into the open hashed file system. 

* This should be set to EWS_DOCUMENT_NULL by the EmWeb/ Compiler. 

*/ 

EwsDocument document_list; 
/* 

* Archive-specific cookie table. This table is indexed by data_offset 

* value find in the cookie header node. 
* 

* !!!N0TE: location of this variable is important. For bacward comatibility 

* * of archives, it MUST be the last field in this structure. 

•/ 

const EwCookieAt tributes •emweb_cookie_tbl ; 



) EwsArchive_t ; 



DOCUMENT ARCHIVE DATA COMPONENT 

The document archive data component is a relocatable, endian-independent , 
static data structure containing compressed documents and information about 
how to access them. 

All 16-bit and 32-bit quantities are represented as arrays of octets. The 
first octet is the most significant {i.e. Big Endian) . 

All pointers are 32-bit (array of four octets) offsets from the beginning of 
the archive data. 

All strings are .asciiz (' \0 '-terminated ASCII) and are represented by a 
pointer to the string. 

Data storage for strings and various other variable-length components can 
be placed between headers at the discretion of the EmWeb/Compiler. 

The document archive data component takes the following form: 

EwsArchiveHeader 
(optional padding) 

{ EwsDocumentHeader { EwsDocumentNode, ... J (optional padding) ), ... 

The, optional padding can be used to store variable length fields such 
as strings, compressed documents, etc. 

/ 



EwsArchiveHeader 

The archive data component begins with an archive header at offset zero 



/ 



/ 
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* NOTE WELL: KEEP SIZEOF_EWS^ARCHIVE_HEADER UP TO DATE! II 
*/ 

typedef struct EwsArchiveHeader_s 
{ 





uint 8 


magic (4] ; 


/♦ 


Magic number for archive validation */ 






EWLARCKIVE J*AGI C_0 


' E' 






define 


EW^ARCHXVE^MAGI C_l 


'W 






define 


EW^ARCHIVE_MAGI C_2 


'd' 






define 


EW_ARCHIVE _KAGI C_3 


'a' 




* 


define 


EW^ARCHI VEL>1AGI C 


((' 


E'«24) | CW'«16) | Cd'«8) |'a') 




uint8 


version_jnaj ; 


/* 


Archive version (major/minor) */ 




uintB 


version_min; 








uint8 


compiler_maj.; 


/* 


EmWeb/Compiler version (ma j or /minor) */ 




uint8 


compiler_min; 








uint8 


length [4] ; 


/• 


length of archive, octets */ 




uint8 


name_of f set [4] ; 


/* 


Offset to archive name string */ 




uint8 


date_1123_offset (43 


; /• Offset to HTTP date (RFC1123 format) 




uint8 


date 1036_of fset [4] 


; /* Offset to HTTP date (RFC1036 format) 




uint8 


doc_offset [4] ; 


/• 


Offset to first document header */ 




uint8 


dict_offset [4] ; 


/* 


Offset to compression dictionary */ 



} EwsArchiveHeader, * EwsArchiveHe'aderP; 
^define SIZEOF_EW5_ARCHIVE_HEADER 32 /* NEVER use si2eof () •/ 



EwsDocumentHeader 

For each document in the archive, there is a corresponding document 
header. The first document header is referenced by the doc_offset 
field of the archive header. Subsequent documents are chained together 
using the next_pffset field in each document header. The last document 
header in the archive contains a zero in the next_offset field. 

The following types of documents are supported: 

Link - Generates a redirection URL. The redirection URL is an 

uncompressed string stored in the data area. node_count 
should be zero. 



Generic (non-text) mime type. The data area contains the mime 
document. The mime content is indicated by the string at 
mime_offset. Compression is optional. node_count should be 
zero. 

Generic text type. The text may contain EmWeb/ Compiler 
HTML extensions for <EMWEB_STRING> , <EMWEB_INCLUDE> , 
form get processing, etc. Each such extension results in 
one or more document nodes being present describing the 
actions to take at certain points during the processing of 
the data. The data contains the static parts of the 
document and may optionally be compressed. The mime content 
is indicated by the string at mime_offset. 

Index - An index URL. An absolute path URL is stored as an 

uncompressed string in the data area. node_count should be 
zero. 

Form - A form action URL. There should not.be a data section. 

There will be a FORM node that indicates the index to 



Mime 



Text 
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use for the start/set/submit operations in handling a 
posted form. 

- A CGI URL. There will be a CGI node that indicates the 
index to use for the start/data operations in handling a 
raw CGI request. An optional data section containing 
the uncompressed content of the corresponding URL file 
(if present) is made available in the EwsContext. This 
could be used for CGI imagemap data, for example. 

- A mapfile URL. There will be an imagemap node that 
indicates the index into a per-archive imagemap table 
for processing an imagemap. 



Note that any document might be marked hidden. If so, the document is 
not accessible by a client browser directly. Instead, the document is 
used as a building block. It can be cloned, or EMWEB_INCLUDEd . 

NOTE WELL: KEEP SIZE0F_EWS_DOCUMENT_HEADER UP TO DATE! ! 



typedef struct EwsDocumentHeader_s 



{ 



uint8 next_offset (4) ; 

uint8 url_offset [4] ; 

uint8 document_type; 



* 



ft 



/* If you add a document type, upda 
def ine EW _ J ARCHIVE_DOC_TYPE_MASK 
define EW_ARCHIVE_DOC_TYPE_LINK 
define EW _ J ARCHIVE_DOC_TYPE_MIME 
/ • EW _ J ARCHIVE_DOC_TYPE_TEXT 
define EW _ARCHIVE_D0C_TYPE_FORM 
define EW _ARCHIVE_DOC_TYPE_INDEX 
define EW _J^RCHIVE_DOC_JTYPE_CGI 
define EW_J^RCHIVE_DOC_TYPE_IMAGEMAP 
define EW^CHIVE_DOC_TYPE_FILE 
define EW_ARCHIVE_DOC_FLAG_STATIC 
define EW _ J ARCHIVE_D0C_FLAG_FORM 
define EW_ARCHIVE_DOC_FLAG_HIDDEN 



offset to next document or 0 if last */ 
offset to URL string */ 

type of document */ 

te . ./compiler/readarchive.c */ 



OxOF 


/• 


type field */ 


0 


/• 


redirection URL */ 


1 


/• 


generic mime data type */ 


2 


* 


[obsolete] */ 


4 


/• 


Form action URL */ 


5 




/• index URL */ 


8 


/• 


CGI-bin interface •/ 


9 


/• 


Imagemap interface •/ 


10 


/• 


local filesystem */ 


0x20 


/• 


treat as static document •/ 


0x4 0 


/* 


contains form node */ 


0x80 


/• 


hidden (internal use) */ 



uint8 



comp_method; 



/* compression method */ 



define EW^CHIVE_COMPRESSION_NONE 0 
define EW _ARCHIVE_C0MPRESSION_EMWEB 1 

define EW_J^CHIVE_COMPRESSION_DEFAULT EW^CHIVE_COMPRESSION_EMWEB 



uint8 
uint8 

uintB 
uintB 

uint8 
uint8 
uintB 

uint8 
uint8 



node_count [2] ; /* number of document nodes */ 
node_offset [4] ; /* offset to array of document nodes */ 

mime_of fset [4] ; /* offset to mime content type string */ 
realnLoffset [4] ;/• offset to authentication realm string */ 



orig_length[4] ; 
data_length[4) ; 
data_offset [4) ; 



/* length of original (uncompressed) data */ 
/* length of compressed data */ 
/* offset to compressed data */ 



hdr_node_count; /* number of document header nodes •/ 
hdr_flags; /* header specific flags 



« define EW^CHIVE_DOC^.HDR_COOKlE_FLG 0x0 1 h 
« define EW^CHIVE_DOC_HDR^CACHE_FLG 0x02 /■ 

ft define ew^chive_doc_hdr_vary_flg 0x03 h 



set if COOKIE hdr present •/ 
set if CACHE hdr present •/ 
set if VARY hdr present */ 



uint8 



reserved [2] ; 
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3 EwsDocumentHeader; * EwsDocumentHeaderP; 

^define SI2E0F_EWS_D0CUMENT_HEADER 40 /* never use sizeof */ 



ewsDocumentNode 

The document header points to an array of zero or more document nodes 
followed by header nodes. 

The node_count field of the document header indicates the number of nodes 
present. Each node represents a special run-time action to be taken by the 
EmWeb/Server when processing requests for the document. When processing 
reaches the specified point in the uncompressed data, the specified action 
is taken. 

Header node contains information needed to create HTTP reply header(s). 
The hdr_count field of the document header indicates the number of hdr_nodes 
present. Each node represents a special run-time action to be taken by the 
EmWeb/Server when processing requests for the document. Header nodes are processed 
first as the headers are built into the reply befor data part of the document 
is processed. 

Header nodes are sorted in the archive by type. Compiler sorts and includes 
in the archive only headers of the types for which the flag is set in hdr_flags 
field in the Document Header. 

The document header node(s) immediately follow the ewsDocumentNodes for a 
given document. 

For a cache control header, the first offset in the node will be used to 
point to the ETAG for this (static) document. ETAGS are used for 
cache-control in HTTP 1.1. (Note that an ETAG will not be used for a 
dynamic document) . 

The type field will indicate what type of header node it is - cache or 
state cookie, etc. 
The other fields are reserved. 

Note that in the future, We may use the last 32 bits in this header 
to be an instance C pointer for the cache control header. 

NOTE WELL: KEEP SIZEOF_EWS_DOCUMENT_NODE UP TO DATE! ! I 

/ 

typedef struct EwsDocumentNode_s 
I 

uintB data_of f set [4] ; /* location of node in uncompressed data 

stream (relative to start of uncompressed 
document data) , 

for COOKIE header it is an index to CookieTable 



uint8 



type; 



/* type of node */ 



* 
* 
* 



i 

2 
3 
4 
5 
6 
7 
8 



/♦ If you add a node type, update ../compiler/readarchive.c ♦/ 
define EW_DOCUMENTjiODE_TYPE_STRING 
define EW_DOCUMENT__NODE_TYP E_INCLUDE 
define EW_DOCUMENT_NODEJIYPE_FORM 
define EW_DOCUMENT_jaODE_TYPE_CGI 
define EW J30CUMENT_N0DE__TYPELIMAGEMAP 
define EW_DOCUMENT_NODE_TYPE_COOKIE 
define EW_DOCUMENT_NODE_TYPE_CACHE 
define EW_DOCUMEOT_NODE_TYPE_VARY 



<EMWEB_STRING> •/ 
<EMWEB_INCLUDE> */ 
<FORM> operation */ 
CGI operation •/ 
Image Map •/ 
<EMWEB_COOKIE> •/ 
CACHE •/ 

content negotiation*/ 



uintB 



attributes; 



/* node attributes ♦/ 



/• If you add a node attribute, update ../compiler/readarchive.c */ 
define EWJD0CUMENT_N0DE_REPEAT 0x01 /• repeat until NULL for 

EMWEB_STRING and 
EMWEB_INCLUDE nodes */ 
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# define EW_DOCUMENT_HDK_SECURE 0x02 /* SECURE flag for cookie */ 

uint8 reserved (2); /* reserved for future use */ 



uint8 



index 14) ; 



index assigned to node. This may be 
hierarchical. (e.g. the FORK index 
contains a form number and element 
number, the STRING index contains 
a conversion type (most significant 
8 bits) and a string number (least 
significant 24 bits) • 

The COOKIE index contains string number 
for cookie's value generating C-code. 
This index is applied to the switch contained 
in emweb_string () function */ 



} EwsDocumentNode, * EwsDocumentNodeP; 

#define SIZEOF_EWS_DOCUMENT_J*ODE 12 /* never use sizeof */ 
#define NEXT_DOCNODE ( x ) ( (EwsDocumentNodeP) (( (uint8 *)(x)) \ 

+ SIZEOF_EWS_DOCUMENT_NODE) ) 

tfendif /• _EW_DB_H •/ 
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/• 

* $Id: ew_form.h,v 1.23 . 1997/06/28 11:59:50 ian Exp $ 

* Product: EmWeb 

* Release: $Name: $ 
* 

* %CopyRight% 
* 

* Emweb Form definitions between server and generated code. These are 

* also used in typed emweb_STRINGs , etc. 
* 

Uifndef _EW_FORM_H 
#de£ ine _EW_FORM_H 

^include "ew_types.h" 
# include "ew_common.h" 
# include M ews_def .h" 

/• 

* Application Form Serve Function 

* Fills in form template with default values. (we comment out the prototype 

* to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*). 
* 

* context - request context 

* form - pointer to form-specific structure 

* No return value 
•/ 

#ifndef cplusplus 

typedef void EwaFormServe_f ( ) ; 
tfelse /♦ cplusplus */ 

typedef void EwaFormServe_f ( EwsContext context, void * form ) ; 
flendif /• cplusplus •/ 

/* 

* Application Form Submit Function 

* Processes submitted form. (We comment out the prototype 

* to avoid compiler warnings — the actual application functions define 

* a specific form structure instead of void*). 
* 

. * context - request context 

* form - pointer to form-specific structure 
* 

* Returns NULL for default response to server (accepted), or redirection URL, 
♦/ 

tifndef cplusplus 

typedef char * EwaFormSubmi t_f ( ) ; 
Seise /* cplusplus •/ 

typedef char * EwaFormSubmi t_f ( EwsContext context, void * form ); 
ftendif /* cplusplus */ 

/• 

* Form Field Types 

* Each field element has a type associated with it. Each type has conversion 

* routines to handle conversions between HTML and internal representations. 

* NOTE: if you modify this enum list, you MUST update the FieldMap in 

* file ewc_code.c!! 
•/ 

typedef enum EwFieldType_e 

ewFieldTypeDecimalOverride = 0 /* unsigned decimal integer ♦/ 
,ewFieldTypeRadio /• radio button - serve setup and submit */ 

iewFieldTypeRadioField /* radio fields - used in serving form */ 
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.ewFieldTypeSelect /• 

,ewFieldTypeSelectField /* 

, ewFieldTypeSelectMul ti / • 

, ewFieldTypeCheckbox / * 

,ewFieldTypeText /* 

, ewFieldTypelmage / * 

,ewFieldTypeDecimalUint /* 

,ewFieldTypeDecimalInt /* 

, ewFieldTypeHexInt /« 

, ewFieldTypeHexS tring / 1 

, ewFieldTypeDottedIP h 

, ewFieldTypelEEEMAC /« 

, ewFieldTypeFDDIMAC h 

, ewFi eldType S tdMAC / ■ 

,ewFieldTypeDecnetIv /« 

,ewFieldTypeFile h 

, ewFieldTypeTextOverride h 

, ewFieldTypeObj ectID / < 

,ewFieldTypeMAX h 
) EwFieldType; 



select enum - serve setup and submit */ 

select enum fields - used in serving form •/ 

multiple select •/ 

checkbox */ 

text field •/ 

image field */ 

unsigned integer */ 

signed integer •/ 

hexadecimal integer •/ 

hexadecimal string */ 

dotted IP address •/ 

IEEE MAC •/ 

FDD I MAC */ 

Standard MAC */ 

Decnet IV Address */ 

input type file handle */ 

serve input file name field */ 

object identifier •/ 

MUST BE LAST •/ 



Form Field Representation 

The compiler generates the following structure for each element in the 
form. In general, a FORM document node is placed in the archive at the 
offset immediately following a VALUE= in TEXT, TEXTAREA, HIDDEN, or PASSWORD 
field. The field component of the form node index refers to a field 
structure as defined below. The' field type would be ewFieldTypeText, or 
one of the derivative extended types such as ewFieldToDottedIP . If a 
VALUE was specified in the source HTML, the compiler translates it into 
the appropriate internal representation and creates the def ault_value of 
the field. (For ewFieldTypeText, this is simply a pointer to the null 
terminated string. For other fields, this is a pointer to a value whose 
length is determined by the type in ewFieldTable) , The NAME= part of 
the field is saved, and the offset into the compiler-generated form for 
the value and status portions of the field is stored in value_offset and 
status_of fset. 

Checkboxes and multiple selections are fairly straight forward. 

The type ewFieldCheckbox or ewFieldSelectMulti is used, and the 

node appears where the word " CHECKED" or "SELECTED" may appear. If a 

VALUE= is present, it is saved in the sel_value field. Otherwise, these 

types are identical to the extended text types above. 

Radio buttons and single-select boxes are more complex. With a single 
NAME=, there may be multiple VALUE= where only one applies to the actual 
value of the form field, with N radio buttons or single select options, 
the compiler generates N+l field- structures. One structure is used to 
read and write the value in the internal generated form. This would have 
type ewFieldTypeRadio or ewFieldTypeSelect, contain the default value, 
offsets into the form structure, and the field name. In addition, an array of 
integers containing all values corresponding to the generated enumerator is 
saved in enum_list. The other N field structures .would represent each radio 
button or select option and have the type ewFieldTypeRadioField or 
ewFieldTypeSelectField. These are referenced by form nodes in the document 
archive at the location corresponding to, where a "CHECKED " or "SELECTED " 
keyword would be inserted. They would not have a name field. Instead, 
the enum_value field would be set' to the VALUE= enumeration corresponding 
to the specific field. 



typedef struct EwFormField_s 



{ 



EwFieldType 
const void 
uintf 



field_type; 
•default_value; 
value_of f set; 



/* type of field •/ 

/• pointer to default value */ 

/• offset to value in form struct »/ 
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status_of f set; /* 

♦name; /* 

*enum_list; /* 

enum_value; /* 

*sel_value; /« 



) EwFormField, * EwFormFieldP; 



offset to status in form struct 
name of field from NAME="» •/ 
list of field values by enum */ 
SELECT/RADIO value of field */ 
SELECT multiple value field */ 



Form Representation 

The following structure represents an HTML FORM. This points to the 
application-provided serve and submit functions, indicates the size 
of the compiler-generated form structure, and points to a table of 
field structures as defined above. 



typedef struct £wFormEntry_s 
{ 

EwaFormServe_f *serve_f ; 

EwaFormSubmi t_f * submi t_f ; 
uintf form_size; 
uintf f ield_count; 

const EwFormField *field_list; 
) EwFormEntry, • EwFormEntryP; 



/* application serve function */ 
/* application submit function */ 
/* sizeof form structure */ 
/* number of fields in form */ 
/* list of fields •/ 



* Document Node Conversion Macros 

* These macros convert between the 32-bit node index and a form and element 

* index. 



#define EW_FORM_ELEMENT_START 

#define EW_FORM_ELEMENT_END 

#def ine EW_FORM_NODE_INDEX_TO_FORM_INDEX (i) 

#def ine EW_FORM_NODE_INDEX_TO_ELEMENT_INDEX ( i > 

^define EW_FORM_ELmEOT_TO_NODE_INDEX ( f , e) 



(0) 

(Oxffff ) 
Ui) » 16) 
((i) & Oxffff) 
(((f) « 16) | 



(e)) 



/• 

* Form conversion functions. 

* The "To" function converts to HTML ASCII format from the internal 

* representation and writes it directly to the output data stream. 

* The "From" function converts from HTML ASCII contained in a parsed network 

* buffer EwsString and converts it to the internal representation. 
•/ 

typedef void EwFieldTypeTo_f 

( EwsContext context, const EwFormField *f ield ) ; 
typedef void EwFieldTypeFrom_f 

( EwsContext context, const EwFormField *field, EwsStringP stringp ) ; 
typedef void EwFieldTypeFree_f ( void *p ) ; 

#ifdef EW_CONFIG_OPTIOIi.FIELDTyPE_RADIO 

extern EwFieldTypeToJE ewFieldToRadioField; 

#endif /* EW_CONFIG_OPTION_FIELDTYPE_RADI0 •/ 

*if defined ( EW_CONF I G_OPTI 0N_FI ELDTYP E_RADI 0) \ 

| | defined (EW_CONFIG_OPTION_FIELDTYPE_SELECT_SINGLE) 
extern EwFieldTypeFronuf ewFieldFromRadio; 
flendif /* EW_CONFIG_OPTION_FIELDTYPE_£ADIO J SELECT_S INGLE */ 

tfifdef EW_CONFIGJDPTION_FIELDTYPS_SELECT_SINGLE 
extern EwFieldTypeTo_f ewFieldToSelectField; 
flendif /• EW_CONFIG_OPTIO^FIELDTYPE - _SELECT_S INGLE */ 

flifdef EW_CONFIG_OPTION_FIELDTYPE_SELECT_MULTIPLE 
extern EwFieldTypeTo_f ewFieldToSelectMulti; 
extern EwFieldTypeFrom_f ewFieldFromSelectMulti ; 

#endif /• EW_CONFIGJDPTIOIl_FIELDTYPE^S ELECT J4ULTIPLE •/ 
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#ifdef EW_C0NFIG_0PTION_FIELDTYP5_CKECKBOX 
extern BwFieldTypeTo_f ewFieldToCheckbox; 
extern EwFieldTypeFronuf ewFieldFromCheckbox; 
flendif /♦ EW_CONFIG_OPTION_FIELDTYPE_CHECKBOX */ 

#ifdef EW_CONFIG_OPTION_FIELDTYPE_CKECKBOX 
extern EwFieldTypeTo_f ewFieldToText; 
extern EwFieldTypeFronuf ewFieldFroroText; 
extern EwFieldTypeFree_f ewFieldFreeText; 
flendif /* EW_C0NFIG_OPTIO^FIELDTYPEUCHECKB0X */ 

extern EwFieldTypeTo_f ewFieldToDecimalUint; 

tfifdef EW_CONFIG_OPTION_FIELDTYPE_IMAGE 

extern EwFieldTypeFronuf ewFieldFromlmage; 

#endif /* EW_CONFIG_OPTION_FIELDTYPEUIMAGE •/ 

Uf defined (EW_C0NFIG_0PTI0N_FIELD7yPE_DECIMAL_UINT> \ 
| | defined (EW_CONFIG_OPTION_FIELDTYPE„DECIMAL_INT)\ 
I | defined <EW_CONFIG_OPTIO*UFIELDTYPE_IMAGE) 

extern EwFieldTypeFronuf ewFieldFromDecimal ; 

ftendif /* EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_UINT | INT | IMAGE •/ 

tfifdef EW_CONFIG_OPTION_FIELDTYPE_DECIMAL_INT 
extern EwFieldTypeTo_f ewFieldToDecimallnt ; 

#endif /• EW_C0NFIG_OPTION_FIELDTYPE_DECIMAL_INT •/ 

flifdef EW_CONFIGJDPTION_FI£LDTYPE_KEX_INT 
extern EwFieldTypeTo_f ewFieldToHexInt ; 

extern EwFieldTypeFronuf ewFieldFromHexInt; . 

#endif /• EW_CONFIG_OPTION_FIELDTYPE_HEX_INT */ 

# i f def £W_C0NFI G_OPTI ON_FI ELDTYPE_HEX_STRING 
extern EwFieldTypeTo_f ewFieldToHexString; 
extern EwFieldTypeFronuf ewFieldFromHexString; 
extern EwFieldTypeFree_f ewFieldFreeHexString; 
#endif /* EW_C0NFI G_OPT I ON_F I E LDTYP E_H EX_S TR I NG */ 

flifdef EW_COOTIG_OPTION_FIELDTY?E_DOTTEDIP 
extern EwFieldTypeTo_f ewFieldToDottedIP; 
extern EwFieldTypeFronuf ewFieldFromDottedIP; 
flendif /* EW_C0NFI G_OPTI 0N_FI ELDTYPE_DOTTED I P */ 

#ifdef EW_CONFIG_OPTION_FIELDTYPE_DECNET_IV 
extern EwFieldTypeTo_f ewFieldToDecnetIV; 
extern EwFieldTypeFronuf ewFieldFromDecnetIV; 
#endif /* EW_CONFIG_OPTION_FIELDTYPE_DECNET_IV */ 

flif defined (EW_C0NFIG_OPTI0N_FIELDTYPE_IEEE_MAC) \ 
| | defined (EW_CONFIG_OPTION_FIELDTYPE_FDDI_>1AC)\ 
| | defined { EW_CONFI G__OPTION_FIELDTYP E_ST9_MAC ) 

extern EwFieldTypeFronuf ewFieldFromMAC; 

flendif /* EW_CONFIG_OPTION_FIELDTYP£_IEEE|FDDI | STD_MAC */ 

ttif defined (EW_C0NFIG_OPTI0N_FIELDTYPE_IEEE_MAC) \ 

| | defined (EW_COOTIG_OPTI0N_FIELDTYPE_STD_MAC) 
extern EwFieldTypeTo_f ewF i el dToI EEEMAC ; 

#endif /* EW_CONFIG_OPTIOICFIELDTYPE_IEEE|STD^MAC */ 

flifdef EW_CONFIG_OPTION_FIELDTYPE_FDDI_MAC 
extern EwFieldTypeTo_f ewFieldToFDDIMAC; 
#endif /♦ EW_CONFIG_OPTION_FIELDTYPE.FDDI.nAC */ 

#ifdef EW_CONFIG_OPTlON_FIELDTYPE_STD_MAC 

extern EwFieldTypeFronuf ewFieldFromStdMAC; 
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ftendif /• EW_CONFIG_OPTIOI^FIELDTyPE_STD_KAC •/ 

ftifdef EW_CONFIG_OPTION_FIELDTYPE_FILE 
extern EwFieldTypeFrom_f ewFieldFromFile; 
extern EwFieldTypeFree_f ewFieldFreeFile; 
ftendif /* EW_CONFIG_OPTIOILJTELDTYPE_FILE »/ 

ftifdef EW CONFIG_OPTIONJFIELDTYPE_OID 
extern EwFieldTypeTo_f ewFieldToObjectID; 
extern EwFieldTypeFrom_f ewFieldFromObjectID; 
extern EwFieldTypeFree_f ewFieldFreeObjectlD; 
ftendif /* ew_config_optio^fieldtypel.oid •/ 

typedef struct EwFormFieldTable_s 



( 

uintf 

EwFie 1 dTypeTo_f 
EwFieldTypeFronuf 
EwFieldTypeFree_f 
) EwFormFieldTable; 



f ield_size; 
*to_f ; 
•f rom_f ; 
*f ree_f ; 



/* size of field */ 

/* convert to HTML •/ 

/* convert from HTML */ 

/* free dynamic pointer */ 



ftifdef EW_DEFINEJrIELD_TYPE_TABLE 

const EwFormFieldTable ewFormFieldTable!] = 



{ sizeof (uint32) , ewFieldToDecimalUint , NULL, 



ifdef EW_CONFIG_OPTION_FIELDTYPE_RADI0 

, { sizeof (int) , NULL, 

t \ o, ewFieldToRadioField, 

else'/* EW_CONFIG_OPTION_FIELDTYPE_RADIO •/ 

, { 0, NULL, 

, { 0, NULL, 

endif /• EW_CONFIG_OPTION_FIELDTYPE_RADIO •/ 



ewFieldFromRadio, 

NULL, 

NULL, 
NULL, 



ft ifdef EW_CONFIG_OPTI0N_FIELDTYPE_SELECT_SINGLE 

, { sizeof (int) , NULL, ewFieldFromRadio, 
t { o, ewFieldToSelectField, NULL, 

ft else'/* EW_CONFIGJDPTION_FIELDTYPE_SELECT_SINGLE */ 
t { 0, NULL, NULL, 

, { 0, NULL, NULL, 

endif /• EW_CONFlG_OPTIO*U r IELDTYPE_SELECT_SINGLE */ 



NULL ) 



NULL } 
NULL ) 

NULL ) 
NULL } 



NULL ) 
NULL ) 

NULL } 
NULL } 



ifdef EW_CONFIG_OPTION_FIELDTYP£_SELECT_tfULTIPLE 

,{ sizeof (boolean) , ewFieldToSelectMul ti, ewFieldFromSelectMulti , NULL ) 
else /* EW_C0NFIG_0PTI0R_FIELDTyP5_SELECT_MULTIPLE •/ 

t { 0r NULL, NULL, NULL ) 

endif /• EVL.CONFlG_OPTION_FIELDTYPE_SELECT_MULTIPLE */ 

ft ifdef EW CONFIG_OPTI0N_FIELDTYPE_CHECKB0X 

,{ sizeof (boolean) / ewFieldToCheckbox, ewFieldFromCheckbox, NULL ) 
ft else /* EW CONFIG_OPTION_FIELDTYPE_CHECKBOX • / 

t{ 0 / ~ NULL, NULL', NULL } 

ft endif /* EW_CONFIG_OPTIOI^FIELDTYPE_CHECKBOX */ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPE_TEXT . 

,{ sizeof (char ♦) , ewFieldTpText, ewFieldFromText, ewFieldFreeText ) 

ft else /* EW CONFIG_OPTION_FIELDTYPE_TEXT •/ 

9 \ l/ " NULL, NULL, NULL } 

ft endif /* EW_CONFlG_OPTIOrL.FIELDTYPE.TEXT */ 

ft ifdef EW_CONFIG_OPTlON_FIELDTYPE_IMAGE 

, { sizeof (uint32), NULL, ewFieldFromDecimal, NULL ) 

ft else /* EW CONFIG_OPTION_FIELDTYPE_IMAGE •/ 

| { o, " NULL, NULL, NULL } 
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ft endif /* ew_config_option_fieldtype_.image */ 

ft ifdef EW_CONFIG_OPTIOl_FIELDTYPE_DECIMAL_UINT 

, { sizeof (uint32) , ewFieldToDecimalUint, ewFieldFromDecimal , NULL ) 
ft else /• EW_CONF I G_OP T I ON_FI ELDTYP E_DE C I MAL_U I NT •/ 

,10, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTION_FIELDTYPE_D£CIMAL_UINT •/ 



ft ifdef EW_C0N7IG_0PTI0N_FIELDTYPE_DECIMAL_INT 

,{ si2eof (uint32) , ewFieldToDecimallnt, ewFieldFromDecimal, NULL } 
ft else /• EW_CONFI G_OPTI ON_.FI E LDTYP E_D EC I MAL_INT •/ 

, { 0, NULL, NULL, NULL } 

ft endif /* EW_CONFIG.OPTIOH-FIELDTYPE_PECIMAL_.INT •/ 

ft ifdef EW_CONFIG_OPTION_J r IELDTYPE_HEX_INT 

, { sizeof (uint32) , ewFieldToHexlnt, ewFieldFromHexInt, 
ft else /• EW_C0NFI G_OPTI ON_FI ELDTYP E_»HEX_I NT */ 

, { 0, NULL, NULL, 

ft endif /* EW_CONFIG_OPTION_FIELDTYPE_HEX_INT •/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING 

, { sizeof (EwsFormFieldHexString) , ewFieldToHexString, ewFieldFromHexString, 
ewFieldFreeHexString } 
ft else /* EW_CONFIG_0PTION_FIELDTYPE_HEX_STRING */ 

, { 0, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTION_FIELDTYPE_HEX_STRING •/ 

ft ifdef EW_CONFIG_OPTION_FIELDTYPE_DOTTEDIP 

, { sizeof (uint32) , ewFieldToDottediP, ewFieldFromDottedlP, NULL ) 

ft else /• EW_C0NFIG_0PTION_FIELDTYPE_D0TTEDIP •/ 

, { 0, NULL, NULL, NULL } 

ft endif /• EW_C0NFIG_OPTION_FIELDTYPE_DOTTEDIP •/ 



NULL ) 
NULL } 



ft ifdef EW_CONFI G_OPT 1 0N_FI ELDTYP E_I EE E_MAC 

6,. ewFieldToIEEEMAC, ewFieldFromMAC, NULL ) 

ft else /• EW_CONFIG_OPTION_FIELDTYPE_IEEE_MAC */ 

, { 0, NULL, NULL, NULL ) 

ft endif /* EW_CONFIG_OPTION_FIELDTYPE_JEEE_MAC */ 



ft ifdef EW_CONFIG_OPTION_FIELDTYPE_FDDI_MAC 

,{ 6, ewFi el dToFDDIMAC , ewFieldFromMAC, NULL } 

ft else /• EW_CONFIG_OPTION_FIELDTYPE_FDDI_MAC •/ 

, { 0, NULL, NULL, NULL ) 

ft endif /• EW_CONF I G_OPTIOt_FI ELDTYP E_FDDI_MAC */ 

ft ifdef EW_CONFIG_OPTIOr*_FIELDTYPE_STD_MAC 

, { 6, ewFieldToIEEEMAC, ewFieldFromStdMAC, NULL } 

ft. else /• EW_CONFIG_OPTION_FIELDTYPE_STD_MAC */ 

, { 0, NULL, NULL, NULL } 

ft endif /* EW_CONFIG_0PTION_FIELDTYPE_STD_JIAC •/ 



ft ifdef EV_.CONFIG_OPTION_.FI ELDTYPE_DECNET_IV 

, { sizeof (uintl6).-, •' ewFieldToDecnetXV, ewFieldFromDecnetlv, NULL } 

ft else /* EW_CONFIG_OPTION_FIELDTYPE_DECNET_IV */ 

, { 0, NULL, NULL, NULL } 

ft endif /♦ EW_CONFIG_OPTION_FIELDTYPE_DECNET_IV */ 

ft ifdef EW_CONFIG_OPTION_FI ELDTYP E_F I LE 

,{ sizeof (EwaFileHandle) , NULL, ewFieldFromFile, ewFieldFreeFile } 

,{ sizeof (char ♦), ewFieldToText, ewFieldFromText, ewFieldFreeText ) 

ft else /* !EW_CONFIG_OPTION_FIELDTYPE_FILE •/ 

, { 0, NULL, NULL, NULL } 

, ( 0, NULL, NULL, NULL ) 

ft endif /• EW_CONF I G_OPTIOIi.FI ELDTYP E_FILE •/ 
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ft ifdef EW_CONFIG_OPTIOn-FIELDTYPE_OID 

, { sizeof (EwsFormFieldObjectlD) , ewFieldToObjectID, ewFieldFromObjectID, 
ewFieldFreeObjectlD ) 
ft else /* EW_CONFIG_OPTION_FIELDTYPE_OID •/ 

, { 0, NULL, NULL, NULL ) 

ft endif /• EW_CONFIG_OPTIO^FIELDTYPE_OID */ 

}? 

ftelse /• EW_DEFINE_FORK_FIELD_TYPE_TABLE */ 
extern const EwFormFieldTable ewFormFieldTable [] ; 
ftendif /• EW^EFINE_FOR*t_FIELD_TYPE_TABLE •/ 

ftendif /• _EW_FOWU* */ 
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/* 

* fid: ew_imap.h,v 1^ 1997/05/21 21:55:48 ian Exp $ 

* Product: EmWeb 

* Release: fName: $ 
• 

* %CopyRight% 
* 

* Ernweb image map definitions between server and generated code 

#ifndef _EW_IMap_h 
^define _EW_IMAP_H 



^include "ew_types .h" 



typedef struct 
{ 

uint32 
uint32 
uint32 
uint32 
const char 
) EwimageMap, 



EwimageMap_s 

ul_x; /* upper-left X coordinate 1 
ul_y; /* upper-left Y coordinate < 
lr_x; /* lower-right X coordinate 
lr_y; /• lower-right Y coordinate 
♦url; /* relative redirection URL 
* EwImageMapP; 



I 
I 

V 
•/ 



typedef struct EwimageMapTable_s 

const EwimageMap ♦map_table ; /♦ table of map entries •/ 
uintf map_entries; /* size of map__table •/ 

const char *def ault_url; /* default URL, or null if not specified V 
EwlmageMapTable, * EwimageMapTableP; p IM ' 



) 



#endif /• _ew_imap_h */ 
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CLAIMS 

What is claimed is: 

1 . A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code; 

serving the text document to a client which interprets the mark-up language; and 
when the location is encountered, serving to the client a sequence of characters derived 

from a result of executing a sequence of instructions represented by the segment of application 

source code. 

2. The method of claim 1 , further comprising the step of: 

including in the document at least one more code tag containing a segment of application 
source code. 

3. The method of claim 1 , wherein the step of defining further comprises the step of: 
providing a plurality of documents which collectively define the graphical user interface; 

and 

storing the text document and the plurality of documents as files in a directory tree. 

4. The method of claim 3, further comprising the steps of: 

compiling the directory tree and the files therein into an archive including content 
sources; and 

decompiling a content source back into the text document before the step of serving. 

5. A method for providing a graphical user interface having dynamic elements, comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 
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including in the document a string identified by prototype tags; 

serving the text document to a prototyping client which interprets the mark-up language 
but does not recognize and does not display the prototype tags, but does display the siring; and 

compiling the text document into a content source, omitting the prototype tags and the 
string identified thereby. 

6. The method of claim 5, further comprising the step of: 

including at a location in the document a code tag containing a segment of application 
source code, wherein the prototyping client does not recognize and does not display the code tag; 
and 

the step of further comprising including the segment of application source code in the 
content source. 

7. The method of claim 6, further comprising the steps of: 
decompiling the content source into a replica of the text document; 
serving the replica to a user client; and 

when the location is encountered in the replica, serving to the user client a character 
stream derived from a result generated by executing the segment of application source code. 

8. The method of claim 7, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

9. A method for providing a graphical user interface having dynamic elements., comprising 
the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

including at a location in the document a code tag containing a segment of application 
source code: 

including in the document a string identified by prototype tags; 
compiling the text document into a content source; 
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decompiling the content source into a replica of the text document; ' 

serving the replica of the text document to a client which interprets the mark-up language; 

and 

when the location is encountered in the replica, serving to the client a character stream 
generated by executing the segment of application source code. 

10. The method of claim 9, further comprising the steps of: 

including in the document at least one more code tag containing a segment of application 
source code; and 

including in the document at least one more string identified by code tags. 

11. A software product recorded on a medium, the software product comprising a mark-up 
language compiler which can compile a mark-up language document into a data structure in a 
native application programming language, the compiler recognizing one or more code tags which 
designate included text as a segment of application source code to be saved in a file for 
compilation by a compiler of the native application programming language. 

12. A method for providing a graphical user interface having displayed forms for entry of 
data, comprising the steps of: 

defining elements of the graphical user interface in at least one text document written in a 
mark-up language; 

naming in the document a data item requested of a user and used by an application 
written in a native application programming language; and 

compiling the text document into a content source including a data structure definition in 
the native application programming language for the named data item. 

13. The method of claim 12, wherein the text document is viewed using a prototype client 
during development and is viewed using a user client during use, further comprising the steps of: 

naming the data item within a tag understood in the mark-up language for viewing by 
both the prototype client and the user client; and 
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including in the content source a definition of a function to provide a default value for the 
data item when the content source is served and a definition of a function to perform an 
application specific operation when the data item is returned by the user client. 

14. In a computer-based apparatus for developing a graphical user interface for an application, 
the apparatus including an editor which can manipulate a document written in a mark-up 
language and a viewer which can display a document written in the mark-up language, the 
apparatus further comprising: 

a mark-up language compiler which recognizes a code tag containing a source code 
fragment in a native application source code language, the code tag not otherwise part of the 
mark-up language, the compiler producing as an output a representation in the native application 
source code language of the document, including a copy of the source code fragment. 

15. The apparatus of claim 14, wherein the mark-up language compiler further recognizes 
begin and end prototype tags not otherwise part of the mark-up language, the output 
representation omitting the begin and end prototype tags and all content appearing therebetween 
in the document. 

16. A method for developing and prototyping graphic user interfaces for an application 
comprising the steps of: 

accessing an HTML file, 

encapsulating portions of said HTML and entering source code therein, 
producing a source module from said HTML with encapsulated portions, 
producing source code for a server, and 

cross compiling and linking said application, said source code module and said server 
thereby producing executable object code. 

1 7. The method of claim 16, further comprising the steps of: 
running said object code, 

executing said compiled encapsulated code when requested by a viewer, wherein said 
encapsulated code is associated with said application. 
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1 8. The method of claim 1 7, further comprising the steps of: 

converting data returned by execution of said compiled encapsulated code into a form 
displayable by said viewer. 

19. The method of claim 1 8, wherein the data returned by executing said compiled 
encapsulated code changes over time as a result of changes within the application. 

20. A data structure fixed in a computer readable medium, the data structure for use in a 
computer system including a client and a server in communication with each other, the data 
structure comprising: 

cross-compiled, stored and linked, HTML files with encapsulated portions containing 
executable code associated with said application, server code, and application code, wherein said 
executable code is run when the HTML file is served thereby providing real time dynamic data 
associated with said application. 
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